Overview

overview

8

Static

static

3

ByteBreake...93.exe

windows10-2004-x64

3

ByteBreake...93.exe

windows11-ltsc_2024-x64

8

Resubmissions

22/08/2026, 03:52

260822-ee43nsvwey8

22/08/2026, 03:47

260822-eccweavwdy8

05/08/2026, 02:23

260805-ct5lmstxdx9

05/08/2026, 02:18

260805-crrl1aweka8

03/08/2026, 11:43

260803-nvl2gax1aw9

02/08/2026, 11:55

260802-n3l2faaj5y9

02/08/2026, 11:51

260802-nz43vayxgv9

Analysis

  • user interaction
    yes
  • max time kernel
    900s
  • max time network
    899s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    22/08/2026, 03:47

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    ByteBreaker V2_67143593.exe
  • Size 702KB
  • Sample260822-eccweavwdy
  • SHA256 35d5cdf23553b14ad8051f68b1af8199805f06479391888f609af4ed54ed5a63
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationransomwarespywarestealertrojan

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Downloads MZ/PE file 5 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 3 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
    defense_evasiontrojan
  • Enumerates connected drives 3 TTPs 8 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Drops file in Program Files directory 3 IoCs
  • Drops file in Windows directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 11 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 62 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 2 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 6 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 24 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 61 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\ByteBreaker V2_67143593.exe
    "C:\Users\Admin\AppData\Local\Temp\ByteBreaker V2_67143593.exe"
    1⤵
    • Downloads MZ/PE file
    • Drops file in Program Files directory
    • Modifies registry class
    • Modifies system certificate store
    • Suspicious use of WriteProcessMemory
    PID:4312
    • C:\Users\Admin\AppData\Local\OperaGX_.exe
      C:\Users\Admin\AppData\Local\OperaGX_.exe --silent --allusers=0
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:244
      • C:\Users\Admin\AppData\Local\Temp\7zS4F081399\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS4F081399\installer.exe --silent --allusers=0 --server-tracking-blob=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
        3⤵
        • Downloads MZ/PE file
        • Executes dropped EXE
        • Enumerates connected drives
        • Suspicious use of WriteProcessMemory
        PID:776
        • C:\Users\Admin\AppData\Local\Temp\7zS4F081399\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS4F081399\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff682abbd88,0x7ff682abbd94,0x7ff682abbda0
          4⤵
          • Executes dropped EXE
          PID:6124
        • C:\Users\Admin\AppData\Local\Temp\.opera\86419581-c789-4a06-ab73-11a988232ec3 Opera GX Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\86419581-c789-4a06-ab73-11a988232ec3 Opera GX Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:424
        • C:\Users\Admin\AppData\Local\Temp\7zS4F081399\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zS4F081399\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=776 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\86419581-c789-4a06-ab73-11a988232ec3 Opera GX Installer Temp\opera_package_20260822044752" --session-guid=690a2cf3-6e6c-4a1a-866c-ae6fcb8b135a --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=E407000000000000
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Suspicious use of WriteProcessMemory
          PID:2060
          • C:\Users\Admin\AppData\Local\Temp\7zS4F081399\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zS4F081399\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x2ac,0x2b0,0x2b4,0x27c,0x2b8,0x7ff682abbd88,0x7ff682abbd94,0x7ff682abbda0
            5⤵
            • Executes dropped EXE
            PID:6080
          • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\installer.exe" --backend --initial-pid=776 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\86419581-c789-4a06-ab73-11a988232ec3 Opera GX Installer Temp\opera_package_202608220447521" --session-guid=690a2cf3-6e6c-4a1a-866c-ae6fcb8b135a --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=134.0.5954.67
            5⤵
            • Executes dropped EXE
            • Enumerates connected drives
            • Modifies registry class
            • Suspicious use of WriteProcessMemory
            PID:4212
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\installer.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff61dc6bd88,0x7ff61dc6bd94,0x7ff61dc6bda0
              6⤵
              • Executes dropped EXE
              PID:1136
            • C:\Users\Admin\AppData\Local\Temp\.opera\86419581-c789-4a06-ab73-11a988232ec3 Opera GX Installer Temp\opera_package_202608220447521\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\86419581-c789-4a06-ab73-11a988232ec3 Opera GX Installer Temp\opera_package_202608220447521\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • System Location Discovery: System Language Discovery
              • Enumerates system info in registry
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:5576
              • C:\Users\Admin\AppData\Local\Temp\.opera\86419581-c789-4a06-ab73-11a988232ec3 Opera GX Installer Temp\opera_package_202608220447521\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\86419581-c789-4a06-ab73-11a988232ec3 Opera GX Installer Temp\opera_package_202608220447521\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x97cb80,0x97cb8c,0x97cb98
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:5856
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Enumerates system info in registry
                • Suspicious use of WriteProcessMemory
                PID:1336
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xcccb80,0xcccb8c,0xcccb98
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:5788
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:5276
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:252
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7fff845c5310,0x7fff845c5320,0x7fff845c5330
                      10⤵
                      • Executes dropped EXE
                      PID:4596
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:1364
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7fff845c5310,0x7fff845c5320,0x7fff845c5330
                      10⤵
                      • Executes dropped EXE
                      PID:5472
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x294,0x298,0x29c,0x260,0x2a0,0x121e2bc,0x121e2c8,0x121e2d4
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:2104
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:2868
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7fff845c5310,0x7fff845c5320,0x7fff845c5330
                        11⤵
                        • Executes dropped EXE
                        PID:4188
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:3560
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x178,0x17c,0x180,0x174,0x184,0x7fff845c5310,0x7fff845c5320,0x7fff845c5330
                        11⤵
                        • Executes dropped EXE
                        PID:3856
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:6176
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7fff845c5310,0x7fff845c5320,0x7fff845c5330
                        11⤵
                        • Executes dropped EXE
                        PID:6224
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Checks processor information in registry
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of FindShellTrayWindow
              • Suspicious use of SendNotifyMessage
              • Suspicious use of WriteProcessMemory
              PID:4872
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7fff845c5310,0x7fff845c5320,0x7fff845c5330
                7⤵
                • Executes dropped EXE
                PID:1520
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1592,i,12076776433653014167,9906580669369279981,262144 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1864 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4916
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2016,i,4087904328787163239,15531583380740413807,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2300 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Time Discovery
                • Enumerates system info in registry
                PID:3040
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2352,i,6241637147650330705,15496995108215888153,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3284 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:2672
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2612,i,8841749247233404196,3919484672555942150,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3592 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:5896
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2868,i,15216809421110272488,6675481985416653048,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3648 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5668
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2880,i,9475518337970754543,6522852602944263042,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3608 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4360
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2892,i,15307920532333395583,11631759694877067383,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3676 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:5148
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2904,i,12759675570914555348,451080142199960719,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3656 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:1600
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2856,i,8334706610077512196,3087168483770847429,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3372 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:4700
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=2976,i,7708912965140767376,10695841855430518017,2097152 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3712 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:3896
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_gx_splash.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
                7⤵
                • Executes dropped EXE
                PID:240
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4656,i,14534481925094473808,3333419618998833685,2097152 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4672 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6960
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4840,i,1174412153235418400,11147139115294139531,2097152 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4852 /prefetch:9
                7⤵
                • Executes dropped EXE
                PID:6972
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5004,i,12592332420373278875,7421277306554745598,2097152 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5020 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7032
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5232,i,12783172283592117468,12029730316073781700,2097152 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5244 /prefetch:1
                7⤵
                • Executes dropped EXE
                PID:7048
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5368,i,4003891835437176669,8067400907285604094,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5384 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7060
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5372,i,5888644845754757299,8004405487482350091,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5428 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7072
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5376,i,17818868203199700414,605258516951500530,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5396 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7080
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5364,i,7786588050830947089,15621804559811163247,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5436 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7088
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5876,i,5500284507647633299,4869396359103261311,2097152 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5880 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7156
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6644,i,16487872957715080741,17799082265826324193,2097152 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6788 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6268
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6960,i,13748101554749679840,11812041976338473009,2097152 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7008 /prefetch:9
                7⤵
                • Enumerates system info in registry
                PID:7260
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5796,i,8448839913256059372,5324330472259388161,2097152 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=7360 /prefetch:1
                7⤵
                • Executes dropped EXE
                PID:7976
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7548,i,8467353115784814377,4501208255570930974,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7624 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7996
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7460,i,106104924668514269,17512010764491905102,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7516 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:7988
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7496,i,947104946883024564,4337550591504932328,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7544 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:8004
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7468,i,10222530997883107826,1680325279668236664,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7596 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:8008
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7504,i,2042097808544857778,2925706765459847798,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7576 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:8028
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7520,i,8133800528978877120,3120624445841938158,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7616 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:8020
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8364,i,4150780257552005854,10114608754191277084,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8388 /prefetch:14
                7⤵
                  PID:8084
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8396,i,12698169649643751734,18156567485062988070,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8440 /prefetch:14
                  7⤵
                  • Enumerates system info in registry
                  PID:8092
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8420,i,2246421595505538847,193004540112649007,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8492 /prefetch:14
                  7⤵
                  • Enumerates system info in registry
                  PID:8112
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8412,i,5691674428565863393,10417511071106628363,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8460 /prefetch:14
                  7⤵
                    PID:8104
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8428,i,6563992146689776964,4400409366988876587,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8392 /prefetch:14
                    7⤵
                      PID:8120
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9132,i,6394710284290680045,5137219675856849079,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=6640 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:5948
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=9244,i,6671015622435139237,16531409033492840369,2097152 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9280 /prefetch:9
                      7⤵
                      • Enumerates system info in registry
                      PID:6980
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9472,i,14345778094016804627,7195786203218817609,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9484 /prefetch:12
                      7⤵
                      • Enumerates system info in registry
                      PID:7432
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9968,i,9314481744522585370,1011500353755361282,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9976 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:7180
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10108,i,10194308840770947913,13781579347573112552,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10124 /prefetch:14
                      7⤵
                        PID:7196
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
                        7⤵
                        • Enumerates system info in registry
                        PID:7296
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff7e47438d0,0x7ff7e47438dc,0x7ff7e47438e8
                          8⤵
                            PID:8856
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=2984,i,16255293121727088122,11347785522018029082,2097152 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10372 /prefetch:1
                          7⤵
                          • Enumerates system info in registry
                          PID:9064
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10608,i,3195289142544879188,8185446543559275611,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10624 /prefetch:14
                          7⤵
                            PID:8848
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10728,i,17353242890075758004,10042936889851828001,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10772 /prefetch:14
                            7⤵
                            • Enumerates system info in registry
                            PID:7964
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10932,i,16241344975538312617,175178194570784441,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10928 /prefetch:14
                            7⤵
                              PID:7628
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6576,i,16375304037574773786,9753663036614620808,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11036 /prefetch:14
                              7⤵
                                PID:8716
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11188,i,17241030065563217345,8093880413818095849,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11204 /prefetch:14
                                7⤵
                                • Enumerates system info in registry
                                PID:8792
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11432,i,10082728109061668609,3530069520282815357,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11164 /prefetch:14
                                7⤵
                                  PID:8828
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11096,i,15339437365743972419,11399124756071404725,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=11148 /prefetch:14
                                  7⤵
                                  • Enumerates system info in registry
                                  PID:6136
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11604,i,17906855257806680708,5288388805514305036,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=11608 /prefetch:14
                                  7⤵
                                  • Enumerates system info in registry
                                  PID:6360
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11804,i,9380338600627198023,9001462238292970942,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=11056 /prefetch:14
                                  7⤵
                                    PID:8228
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11828,i,16926833918469607520,11158349201875338728,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=11952 /prefetch:14
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:8292
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11816,i,18019797594801414298,18427993013307974639,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=11932 /prefetch:14
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:8196
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11076,i,8660639434120781125,2254643719850596050,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=11040 /prefetch:14
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:1156
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11776,i,10779558411719764067,5528398281886922539,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=12492 /prefetch:14
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:5724
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11788,i,3252108374225186454,2900541992512804375,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=10016 /prefetch:14
                                    7⤵
                                      PID:8344
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10084,i,721938899323787380,16103653740044557321,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=12548 /prefetch:14
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:8596
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12612,i,7477995869628697122,5851880469169656413,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=12560 /prefetch:14
                                      7⤵
                                        PID:8692
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12724,i,1002187279661516098,18135186926146298212,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=12760 /prefetch:14
                                        7⤵
                                          PID:8724
                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12680,i,17503318098785796572,7879601541380219486,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=12704 /prefetch:14
                                          7⤵
                                          • Enumerates system info in registry
                                          PID:8696
                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12692,i,17455777244530110328,6318891462263336202,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=12732 /prefetch:14
                                          7⤵
                                            PID:8708
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5368,i,14613910876619376591,7217385430874609362,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=12648 /prefetch:14
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:8456
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=13316,i,8311065973858226439,7090245207769856191,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=13328 /prefetch:14
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:3312
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=13332,i,2905432293374346486,12621954433559117511,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=13360 /prefetch:14
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:8544
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=13368,i,15780489715312081131,8069847198137513812,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=13416 /prefetch:14
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:8520
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=13396,i,679538322961473943,5994333620653077559,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=13456 /prefetch:14
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:8560
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=13384,i,3168462818427109956,6215174474322630252,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=13420 /prefetch:14
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:8584
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=14100,i,16218541999828975011,14740455079583764546,2097152 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=14108 /prefetch:9
                                            7⤵
                                              PID:8712
                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=4456,i,9659933389216322418,10033286979921237411,2097152 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=5768 /prefetch:9
                                              7⤵
                                                PID:1576
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=14456,i,9571679712992622927,14382328376850127662,2097152 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=14464 /prefetch:9
                                                7⤵
                                                  PID:4628
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=10612,i,8163974634451010579,7813827195264548466,2097152 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=10944 /prefetch:9
                                                  7⤵
                                                    PID:8124
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=4064,i,9641929245833220503,2512381632313648309,2097152 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=4024 /prefetch:9
                                                    7⤵
                                                    • Enumerates system info in registry
                                                    PID:9368
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=14760,i,11597510443073356534,6529210296456611689,2097152 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=14768 /prefetch:9
                                                    7⤵
                                                      PID:9892
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=8476,i,5434858406748371599,17105828455674678315,2097152 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=11740 /prefetch:9
                                                      7⤵
                                                        PID:9964
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=14072,i,17399566637035149885,10580966701512952045,524288 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709056590010169 --mojo-platform-channel-handle=14096 /prefetch:14
                                                        7⤵
                                                        • Enumerates system info in registry
                                                        PID:8404
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=14148,i,7118838350941563986,557562941205687066,2097152 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709057527052018 --mojo-platform-channel-handle=10952 /prefetch:9
                                                        7⤵
                                                        • Enumerates system info in registry
                                                        PID:1776
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=14220,i,4046666882896888325,15650094598673679149,2097152 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709058464093867 --mojo-platform-channel-handle=5768 /prefetch:9
                                                        7⤵
                                                        • Enumerates system info in registry
                                                        PID:5104
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=14704,i,13872378501763385411,7724993349119961801,2097152 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709059401135716 --mojo-platform-channel-handle=14700 /prefetch:9
                                                        7⤵
                                                          PID:2160
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAQgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=14512,i,805598387531939674,8285035881739910746,262144 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709060338177565 --mojo-platform-channel-handle=14712 /prefetch:10
                                                          7⤵
                                                          • Enumerates system info in registry
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          PID:7992
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=6704,i,11793971274289462201,3968633916340014932,2097152 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709061275219414 --mojo-platform-channel-handle=4984 /prefetch:9
                                                          7⤵
                                                          • Enumerates system info in registry
                                                          PID:7316
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=14820,i,13572221124176970126,18198274782010977994,2097152 --field-trial-handle=1868,i,359353735099498973,13736845119440992163,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,16639158237679565470,8923737187130982494,4 --trace-process-track-uuid=3190709062212261263 --mojo-platform-channel-handle=5232 /prefetch:9
                                                          7⤵
                                                            PID:8436
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --edition=std-2 --host=https://autoupdate.opera.com/ --installationdatadir="C:\Users\Admin\AppData\Local\Programs\Opera GX" --installdir="C:\Users\Admin\AppData\Local\Programs\Opera GX" --lang=en-US --pipeid --producttype --requesttype=shutdown --version=134.0.5954.67 --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --firstrunver=134.0.5954.67 --firstrunts=1787370549 --consent-info=eyJzdGF0aXN0aWNzX2NvbGxlY3Rpb25fZW5hYmxlZCI6dHJ1ZSwidXNlcl9leHBlcmllbmNlX21ldHJpY3NfcmVwb3J0aW5nX2VuYWJsZWQiOnRydWV9
                                                            7⤵
                                                              PID:1152
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff7e47438d0,0x7ff7e47438dc,0x7ff7e47438e8
                                                                8⤵
                                                                  PID:9852
                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\86419581-c789-4a06-ab73-11a988232ec3 Opera GX Installer Temp\opera_package_202608220447521\assistant\Opera_GX_assistant_134.0.5954.44_Setup.exe_sfx.exe
                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\86419581-c789-4a06-ab73-11a988232ec3 Opera GX Installer Temp\opera_package_202608220447521\assistant\Opera_GX_assistant_134.0.5954.44_Setup.exe_sfx.exe"
                                                          4⤵
                                                          • Executes dropped EXE
                                                          • System Location Discovery: System Language Discovery
                                                          PID:5668
                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\86419581-c789-4a06-ab73-11a988232ec3 Opera GX Installer Temp\opera_package_202608220447521\assistant\assistant_installer.exe
                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\86419581-c789-4a06-ab73-11a988232ec3 Opera GX Installer Temp\opera_package_202608220447521\assistant\assistant_installer.exe" --version
                                                          4⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • System Location Discovery: System Language Discovery
                                                          • Enumerates system info in registry
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:6060
                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\86419581-c789-4a06-ab73-11a988232ec3 Opera GX Installer Temp\opera_package_202608220447521\assistant\assistant_installer.exe
                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\86419581-c789-4a06-ab73-11a988232ec3 Opera GX Installer Temp\opera_package_202608220447521\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x97cb80,0x97cb8c,0x97cb98
                                                            5⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • System Location Discovery: System Language Discovery
                                                            PID:5492
                                                    • C:\Program Files\Booster\GameBooster.exe
                                                      "C:\Program Files\Booster\GameBooster.exe" install
                                                      2⤵
                                                      • Executes dropped EXE
                                                      • Drops file in Program Files directory
                                                      PID:2892
                                                    • C:\Users\Admin\AppData\Local\AIChat_.exe
                                                      C:\Users\Admin\AppData\Local\AIChat_.exe /S
                                                      2⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • System Location Discovery: System Language Discovery
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      • Suspicious use of AdjustPrivilegeToken
                                                      PID:1568
                                                      • C:\Users\Admin\AppData\Local\aichat\aichat.exe
                                                        "C:\Users\Admin\AppData\Local\aichat\aichat.exe" --hidden
                                                        3⤵
                                                        • Executes dropped EXE
                                                        • Adds Run key to start application
                                                        • Checks whether UAC is enabled
                                                        • Modifies system certificate store
                                                        • Suspicious behavior: EnumeratesProcesses
                                                        • Suspicious use of FindShellTrayWindow
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:3860
                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=3860.4524.7746608712815317392 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
                                                          4⤵
                                                          • Drops file in Windows directory
                                                          • Enumerates system info in registry
                                                          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:3400
                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView /prefetch:4 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7fffabfd5fd8,0x7fffabfd5fe4,0x7fffabfd5ff0
                                                            5⤵
                                                              PID:2980
                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1864 --field-trial-handle=1868,i,13756548122243207296,2309150710149294806,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
                                                              5⤵
                                                                PID:3188
                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2108 --field-trial-handle=1868,i,13756548122243207296,2309150710149294806,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
                                                                5⤵
                                                                  PID:620
                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2300 --field-trial-handle=1868,i,13756548122243207296,2309150710149294806,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
                                                                  5⤵
                                                                    PID:4296
                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3488 --field-trial-handle=1868,i,13756548122243207296,2309150710149294806,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6 /prefetch:1
                                                                    5⤵
                                                                      PID:2952
                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4496 --field-trial-handle=1868,i,13756548122243207296,2309150710149294806,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
                                                                      5⤵
                                                                        PID:8232
                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4636 --field-trial-handle=1868,i,13756548122243207296,2309150710149294806,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
                                                                        5⤵
                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                        PID:9220
                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4632 --field-trial-handle=1868,i,13756548122243207296,2309150710149294806,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
                                                                        5⤵
                                                                          PID:9664
                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4340 --field-trial-handle=1868,i,13756548122243207296,2309150710149294806,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
                                                                          5⤵
                                                                            PID:4700
                                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4464 --field-trial-handle=1868,i,13756548122243207296,2309150710149294806,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
                                                                            5⤵
                                                                              PID:5976
                                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=3640 --field-trial-handle=1868,i,13756548122243207296,2309150710149294806,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
                                                                              5⤵
                                                                                PID:2484
                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4548 --field-trial-handle=1868,i,13756548122243207296,2309150710149294806,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
                                                                                5⤵
                                                                                  PID:7204
                                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4512 --field-trial-handle=1868,i,13756548122243207296,2309150710149294806,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
                                                                                  5⤵
                                                                                    PID:4860
                                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4492 --field-trial-handle=1868,i,13756548122243207296,2309150710149294806,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
                                                                                    5⤵
                                                                                      PID:5064
                                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=348 --field-trial-handle=1868,i,13756548122243207296,2309150710149294806,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
                                                                                      5⤵
                                                                                        PID:9772
                                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4632 --field-trial-handle=1868,i,13756548122243207296,2309150710149294806,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
                                                                                        5⤵
                                                                                          PID:10056
                                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4484 --field-trial-handle=1868,i,13756548122243207296,2309150710149294806,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
                                                                                          5⤵
                                                                                            PID:9720
                                                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4368 --field-trial-handle=1868,i,13756548122243207296,2309150710149294806,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
                                                                                            5⤵
                                                                                              PID:7700
                                                                                    • C:\Windows\system32\svchost.exe
                                                                                      C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                      1⤵
                                                                                        PID:2448
                                                                                      • C:\Program Files\Booster\GameBooster.exe
                                                                                        "C:\Program Files\Booster\GameBooster.exe"
                                                                                        1⤵
                                                                                        • Executes dropped EXE
                                                                                        • Loads dropped DLL
                                                                                        • Modifies data under HKEY_USERS
                                                                                        • Suspicious use of WriteProcessMemory
                                                                                        PID:2032
                                                                                        • C:\Program Files\Booster\GameBooster.exe
                                                                                          "C:\Program Files\Booster\GameBooster.exe" --minimized
                                                                                          2⤵
                                                                                          • Executes dropped EXE
                                                                                          • Suspicious behavior: GetForegroundWindowSpam
                                                                                          • Suspicious use of FindShellTrayWindow
                                                                                          • Suspicious use of SendNotifyMessage
                                                                                          PID:2096
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart
                                                                                        1⤵
                                                                                        • Executes dropped EXE
                                                                                        • Loads dropped DLL
                                                                                        • Suspicious use of WriteProcessMemory
                                                                                        PID:6320
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x170,0x178,0x17c,0x174,0x180,0x7fff845c5310,0x7fff845c5320,0x7fff845c5330
                                                                                          2⤵
                                                                                          • Executes dropped EXE
                                                                                          PID:6380
                                                                                      • C:\Windows\system32\wbem\unsecapp.exe
                                                                                        C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                        1⤵
                                                                                          PID:6492
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
                                                                                          1⤵
                                                                                            PID:7344
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x294,0x298,0x29c,0x224,0x2a0,0x7ff7e47438d0,0x7ff7e47438dc,0x7ff7e47438e8
                                                                                              2⤵
                                                                                                PID:7440
                                                                                              • C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe
                                                                                                "C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe" --version
                                                                                                2⤵
                                                                                                  PID:8728
                                                                                              • C:\Windows\system32\sihost.exe
                                                                                                sihost.exe
                                                                                                1⤵
                                                                                                • Suspicious use of FindShellTrayWindow
                                                                                                PID:8164
                                                                                                • C:\Windows\explorer.exe
                                                                                                  explorer.exe /LOADSAVEDWINDOWS
                                                                                                  2⤵
                                                                                                  • Boot or Logon Autostart Execution: Active Setup
                                                                                                  • Enumerates connected drives
                                                                                                  • Checks SCSI registry key(s)
                                                                                                  • Modifies Internet Explorer settings
                                                                                                  • Modifies registry class
                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                  • Suspicious use of FindShellTrayWindow
                                                                                                  • Suspicious use of SendNotifyMessage
                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                  PID:9008
                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                1⤵
                                                                                                • Modifies registry class
                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                PID:9340
                                                                                              • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                1⤵
                                                                                                • Modifies registry class
                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                PID:9352
                                                                                              • C:\Windows\system32\svchost.exe
                                                                                                C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                1⤵
                                                                                                  PID:1868
                                                                                                • C:\Windows\System32\SecurityHealthHost.exe
                                                                                                  \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                                                                                                  1⤵
                                                                                                    PID:7800

                                                                                                  Network

                                                                                                        MITRE ATT&CK Enterprise v16

                                                                                                        Reconnaissance

                                                                                                        Resource Development

                                                                                                        Initial Access

                                                                                                        Execution

                                                                                                        Persistence

                                                                                                        Boot or Logon Autostart Execution

                                                                                                        2
                                                                                                        T1547

                                                                                                        Active Setup

                                                                                                        1
                                                                                                        T1547.014

                                                                                                        Registry Run Keys / Startup Folder

                                                                                                        1
                                                                                                        T1547.001

                                                                                                        Event Triggered Execution

                                                                                                        1
                                                                                                        T1546

                                                                                                        Component Object Model Hijacking

                                                                                                        1
                                                                                                        T1546.015

                                                                                                        Privilege Escalation

                                                                                                        Boot or Logon Autostart Execution

                                                                                                        2
                                                                                                        T1547

                                                                                                        Active Setup

                                                                                                        1
                                                                                                        T1547.014

                                                                                                        Registry Run Keys / Startup Folder

                                                                                                        1
                                                                                                        T1547.001

                                                                                                        Event Triggered Execution

                                                                                                        1
                                                                                                        T1546

                                                                                                        Component Object Model Hijacking

                                                                                                        1
                                                                                                        T1546.015

                                                                                                        Defense Evasion

                                                                                                        Modify Registry

                                                                                                        4
                                                                                                        T1112

                                                                                                        Subvert Trust Controls

                                                                                                        1
                                                                                                        T1553

                                                                                                        Install Root Certificate

                                                                                                        1
                                                                                                        T1553.004

                                                                                                        Credential Access

                                                                                                        Credentials from Password Stores

                                                                                                        1
                                                                                                        T1555

                                                                                                        Credentials from Web Browsers

                                                                                                        1
                                                                                                        T1555.003

                                                                                                        Unsecured Credentials

                                                                                                        1
                                                                                                        T1552

                                                                                                        Credentials In Files

                                                                                                        1
                                                                                                        T1552.001

                                                                                                        Discovery

                                                                                                        Network Share Discovery

                                                                                                        1
                                                                                                        T1135

                                                                                                        Peripheral Device Discovery

                                                                                                        2
                                                                                                        T1120

                                                                                                        Query Registry

                                                                                                        6
                                                                                                        T1012

                                                                                                        System Information Discovery

                                                                                                        6
                                                                                                        T1082

                                                                                                        System Location Discovery

                                                                                                        1
                                                                                                        T1614

                                                                                                        System Language Discovery

                                                                                                        1
                                                                                                        T1614.001

                                                                                                        System Time Discovery

                                                                                                        1
                                                                                                        T1124

                                                                                                        Lateral Movement

                                                                                                        Collection

                                                                                                        Data from Local System

                                                                                                        1
                                                                                                        T1005

                                                                                                        Command and Control

                                                                                                        Exfiltration

                                                                                                        Impact

                                                                                                        Replay Monitor

                                                                                                        Loading Replay Monitor...

                                                                                                        Downloads

                                                                                                        GameBooster.exe
                                                                                                        • Path C:\Program Files\Booster\GameBooster.exe
                                                                                                        • Size 701KB
                                                                                                        • SHA256 b0f4bc5773ab22b63c49339e2dd854df5dfe98d3d2ed1181d47fb154b9d535c9
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        hgsdk.dll
                                                                                                        • Path C:\Program Files\Booster\hgsdk.dll
                                                                                                        • Size 7.4MB
                                                                                                        • SHA256 2720d215168108700767f8e9b57819d55ca139d69d8d828186da186850a37c6c
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        49A7F8B8A2FD8A9E65352CD7C88B1D10
                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49A7F8B8A2FD8A9E65352CD7C88B1D10
                                                                                                        • Size 167KB
                                                                                                        • SHA256 2a572e7332fdd379835e758ebdbacec54697b0172e1b81d4be970bcb8b6c78ee
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        9A1FE8299CD2832973A0AA5F6FB0A7B0
                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\9A1FE8299CD2832973A0AA5F6FB0A7B0
                                                                                                        • Size 281B
                                                                                                        • SHA256 23e136c8df760799998ca6d5d72dd816706bc6cc2a277ab0e39a44794939b5cb
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                        • Size 471B
                                                                                                        • SHA256 62e451cd6fdd5d286f0bc295706c54b95759cc99fc00977248cb156932a32abc
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        49A7F8B8A2FD8A9E65352CD7C88B1D10
                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49A7F8B8A2FD8A9E65352CD7C88B1D10
                                                                                                        • Size 248B
                                                                                                        • SHA256 32de94822550deb1d486a1d5b885b349f11205911925dccd7bcff4e94715e86d
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        9A1FE8299CD2832973A0AA5F6FB0A7B0
                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\9A1FE8299CD2832973A0AA5F6FB0A7B0
                                                                                                        • Size 488B
                                                                                                        • SHA256 bc1fef8f0e0d76c0118d698b1b78384d77796ebae9514cd1969a6fe2b35628fa
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                        • Size 416B
                                                                                                        • SHA256 1fe60739f965825ef1f9a2868dd43315053cb09291c1137f42263ac5aa146bae
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        AIChat_.exe
                                                                                                        • Path C:\Users\Admin\AppData\Local\AIChat_.exe
                                                                                                        • Size 3.6MB
                                                                                                        • SHA256 6430a772eb047467aa0c3e4bc964719dbf85b9adc58e63738a8652099ba6f8ec
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        f_000002
                                                                                                        • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\Cache\Cache_Data\f_000002
                                                                                                        • Size 54KB
                                                                                                        • SHA256 546b8e9cd44a5fa0899bd2f8f80ee0a19ab2bfcc62719e0e694bcdb8623ba3b1
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        OperaGX_.exe
                                                                                                        • Path C:\Users\Admin\AppData\Local\OperaGX_.exe
                                                                                                        • Size 3.9MB
                                                                                                        • SHA256 61dab509f8ee927c74d9faac1eb7b83cb54f3930e4502d80ae6756293447b13e
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        prep_Activatable Class_Hermes_perf.cache
                                                                                                        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                                                                                                        • Size 599B
                                                                                                        • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        134.0.5954.67.manifest
                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\134.0.5954.67.manifest
                                                                                                        • Size 225B
                                                                                                        • SHA256 0e1160adc59a574120ff7a87c060568a79408ae79ca837b71edc69bc210310d6
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        150x150Logo.scale-100.png
                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\150x150Logo.scale-100.png
                                                                                                        • Size 2KB
                                                                                                        • SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        150x150Logo.scale-100_contrast-white.png
                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                                        • Size 1KB
                                                                                                        • SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        150x150Logo.scale-140.png
                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\150x150Logo.scale-140.png
                                                                                                        • Size 3KB
                                                                                                        • SHA256 a36a13a5d5e3d39e3018ccc5f8859944c87256f8be24a3c08a6bf3cb06a26804
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        150x150Logo.scale-140_contrast-white.png
                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\150x150Logo.scale-140_contrast-white.png
                                                                                                        • Size 2KB
                                                                                                        • SHA256 0bd63fe653885286e180fbdf6d1dadc66af242b8ed6bd1d03d8c5eccc20e91d7
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        150x150Logo.scale-180.png
                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\150x150Logo.scale-180.png
                                                                                                        • Size 3KB
                                                                                                        • SHA256 6a8f64754c75edcc9abc1138e44acbd7064d7e8e2a28783939241dbd6afa30a5
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        150x150Logo.scale-180_contrast-white.png
                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\150x150Logo.scale-180_contrast-white.png
                                                                                                        • Size 3KB
                                                                                                        • SHA256 a706b332e6a846357a86c30d0e8bb7697e7dd55c2ae592dd45611ddce0c0bf14
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        150x150Logo.scale-80.png
                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\150x150Logo.scale-80.png
                                                                                                        • Size 1KB
                                                                                                        • SHA256 7e6b0d9ea7fda1b5ca7a0b01290521dff943da4cbf1498412ca7d749db42c32d
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        150x150Logo.scale-80_contrast-white.png
                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\150x150Logo.scale-80_contrast-white.png
                                                                                                        • Size 1KB
                                                                                                        • SHA256 dfd1054f989cdee25f19ea792f363f042a125cab537a424f0224bbee13607e39
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        70x70Logo.scale-100.png
                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\70x70Logo.scale-100.png
                                                                                                        • Size 1KB
                                                                                                        • SHA256 a333d7e4293f5269426b3fcb673a284f3708a66f957de62403b6570b24bae8f5
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        70x70Logo.scale-100_contrast-white.png
                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\70x70Logo.scale-100_contrast-white.png
                                                                                                        • Size 1KB
                                                                                                        • SHA256 ebbe0b4761ea8968a0a3fafb383ac7ae175e98cd31a0f41bdf5fcb43469b58ec
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        installer.exe
                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\installer.exe
                                                                                                        • Size 9.1MB
                                                                                                        • SHA256 4a2f8a2712b23ef4eb33beea0f223e760c077d412b7483c4d89dd8ce37d5609a
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        installer_prefs.json
                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json
                                                                                                        • Size 1KB
                                                                                                        • SHA256 b36d43df5bf1f608f9ad3d172e18fbe2ebedd9ec1d1270c877fd7eb145672348
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        Opera GX Browser.lnk
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\86419581-c789-4a06-ab73-11a988232ec3 Opera GX Installer Temp\opera_package_202608220447521\Opera GX Browser.lnk
                                                                                                        • Size 1KB
                                                                                                        • SHA256 406ef099c37c4620e182cd3a6098cd8a7f08f3bb585bdd9ef8a351b874fffdb7
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        additional_file0.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\86419581-c789-4a06-ab73-11a988232ec3 Opera GX Installer Temp\opera_package_202608220447521\additional_file0.tmp
                                                                                                        • Size 2.8MB
                                                                                                        • SHA256 70f1b1cbe5162fd8842c441779ef4d59de6b182d1448fc6285c6a73ae3033fc4
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        assistant_installer.exe
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\86419581-c789-4a06-ab73-11a988232ec3 Opera GX Installer Temp\opera_package_202608220447521\assistant\assistant_installer.exe
                                                                                                        • Size 2.4MB
                                                                                                        • SHA256 c5eef147beda944c8bff63591165b4c49e556d2c45c6ea9b9f1d9e16f180621e
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        dbgcore.DLL
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\86419581-c789-4a06-ab73-11a988232ec3 Opera GX Installer Temp\opera_package_202608220447521\assistant\dbgcore.DLL
                                                                                                        • Size 196KB
                                                                                                        • SHA256 856a7e6aacf1934324f08dc42b4b37cb20886d933cc0c57283c8425f9ebedbdd
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        dbghelp.dll
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\86419581-c789-4a06-ab73-11a988232ec3 Opera GX Installer Temp\opera_package_202608220447521\assistant\dbghelp.dll
                                                                                                        • Size 1.8MB
                                                                                                        • SHA256 8f880333398382fea1efa73751f4b16d8204a60cc13aefc8c4223b8086eccd81
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        installer_prefs_include.json
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\86419581-c789-4a06-ab73-11a988232ec3 Opera GX Installer Temp\opera_package_202608220447521\installer_prefs_include.json
                                                                                                        • Size 342B
                                                                                                        • SHA256 ba9dcd2936e72e2c0dedbbc6876dcda0e900099909a9eb84c1b5211bfd133b07
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        installer_prefs_include.json
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\86419581-c789-4a06-ab73-11a988232ec3 Opera GX Installer Temp\opera_package_202608220447521\installer_prefs_include.json
                                                                                                        • Size 357B
                                                                                                        • SHA256 560c104646cef33aec44945ef6a911bb313a3e59015f46c973967e39037117f4
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        installer_prefs_include.json
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\86419581-c789-4a06-ab73-11a988232ec3 Opera GX Installer Temp\opera_package_202608220447521\installer_prefs_include.json
                                                                                                        • Size 1KB
                                                                                                        • SHA256 72ed174efa4de0ec7320ebd605c0a6298a9f1f0cf2c6bdff91f992e0bdfd011f
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        2d29d73a-fa12-4ef7-bfe0-4a117aaa322a.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\2d29d73a-fa12-4ef7-bfe0-4a117aaa322a.tmp
                                                                                                        • Size 13KB
                                                                                                        • SHA256 35d78e805a910aad7462893e050376f9d18dbc73c592b4742e6ada87eff3f06b
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        4947902a-9c7e-4cfd-9f3c-d799e756a7e4.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\4947902a-9c7e-4cfd-9f3c-d799e756a7e4.tmp
                                                                                                        • Size 2.6MB
                                                                                                        • SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        7c34ace4-13b0-42fe-b4db-f637dad4cafd.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7c34ace4-13b0-42fe-b4db-f637dad4cafd.tmp
                                                                                                        • Size 4.5MB
                                                                                                        • SHA256 178de7231e855207b84bb36cbe9a9fbebe1965135352f81ec3036d05cbcdea0d
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        installer.exe
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS4F081399\installer.exe
                                                                                                        • Size 9.1MB
                                                                                                        • SHA256 826193106c8e26c8e0daf7c250cf6a5049fa45e7c4b57fd26ad111e0e794fc94
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        94bf950b-3f55-4ad9-99fe-2c5720dff066.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\94bf950b-3f55-4ad9-99fe-2c5720dff066.tmp
                                                                                                        • Size 1.2MB
                                                                                                        • SHA256 3db075e9f1b9a356bdd15c2aa205cac841db963d40b2c8ac834d9d659398bdc9
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        a646d0e8-a0f0-40cb-bf32-61c3ba677a5e.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\a646d0e8-a0f0-40cb-bf32-61c3ba677a5e.tmp
                                                                                                        • Size 472KB
                                                                                                        • SHA256 4b9b79291aca9c45d54ae238655f41b7a0eecb0b80fb3d172cd0b1d75e712540
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        fb5f7e3a-f4f7-4cda-854b-c946389907d7.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\fb5f7e3a-f4f7-4cda-854b-c946389907d7.tmp
                                                                                                        • Size 46KB
                                                                                                        • SHA256 0443bab24dce89bd68e06dba7f4335db89e70cf99ac92a0919d5df35a2c3cf93
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        System.dll
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsaCE74.tmp\System.dll
                                                                                                        • Size 12KB
                                                                                                        • SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        license-ack.txt
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsaCE74.tmp\license-ack.txt
                                                                                                        • Size 16B
                                                                                                        • SHA256 6489d6d7a33c5d40e18fc61eeb6c34c341279ee61816394dde5189aa4ad8fae5
                                                                                                        • MD5 SHA1 SHA512
                                                                                                        Submit Download

                                                                                                        nsis_tauri_utils.dll
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsaCE74.tmp\nsis_tauri_utils.dll
                                                                                                        • Size 33KB
                                                                                                        • SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        Icon_Light_Neutral.png
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4872_1089717525\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                                                        • Size 2KB
                                                                                                        • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        manifest.json
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4872_1089717525\CRX_INSTALL\manifest.json
                                                                                                        • Size 1KB
                                                                                                        • SHA256 b655477791478d7f6f560c740fcd142b504c7f3a73093031a3257abc43fd95ce
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        rules.json
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4872_1089717525\CRX_INSTALL\rules.json
                                                                                                        • Size 839B
                                                                                                        • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        messages.json
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4872_1395462987\CRX_INSTALL\_locales\en\messages.json
                                                                                                        • Size 396B
                                                                                                        • SHA256 1bcb4888a65788a50ed88f4bd95955d1dafdc950b5ef4609b37f42934a4bf3b9
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        Icon_Light_Neutral.png
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4872_1395462987\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
                                                                                                        • Size 962B
                                                                                                        • SHA256 e8adb8a9dcca121a1853749ebef122b84a995ebf8775cd27b0dd54bab9840bd1
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        popup.js.LICENSE.txt
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4872_1395462987\CRX_INSTALL\popup.js.LICENSE.txt
                                                                                                        • Size 1KB
                                                                                                        • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        manifest.json
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4872_304650950\CRX_INSTALL\manifest.json
                                                                                                        • Size 1KB
                                                                                                        • SHA256 ea8b21224a4041e0b5b563ca4d8335dc30b8b9af8a4e03499511471c3e4a7a4f
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        icon-57.png
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4872_530056240\CRX_INSTALL\icons\icon-57.png
                                                                                                        • Size 873B
                                                                                                        • SHA256 8462b976325b85e3fe1140685159792a700d5382f2307d5eb667af10e76d8964
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        favicon_opera_one.png
                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4872_948121724\CRX_INSTALL\favicon_opera_one.png
                                                                                                        • Size 2KB
                                                                                                        • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        aichat.exe
                                                                                                        • Path C:\Users\Admin\AppData\Local\aichat\aichat.exe
                                                                                                        • Size 13.1MB
                                                                                                        • SHA256 b085082eb2af43465549651cb3cd42145861f8f9d7de68b2e37a5671a09c0a68
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        settings.dat
                                                                                                        • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Crashpad\settings.dat
                                                                                                        • Size 280B
                                                                                                        • SHA256 2f9bd6bcf5504b5f7294e09fbcdcdfecdc192794a98438e2180871b7acb0f15a
                                                                                                        • MD5 SHA1 SHA512
                                                                                                        Submit Download

                                                                                                        settings.dat
                                                                                                        • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Crashpad\settings.dat
                                                                                                        • Size 280B
                                                                                                        • SHA256 0ace6155c21e2dbc4f0c74daea82ffe12571daaf429fbbf096576d6045a9bb2a
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        throttle_store.dat
                                                                                                        • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Crashpad\throttle_store.dat
                                                                                                        • Size 20B
                                                                                                        • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                                                                                                        • MD5 SHA1 SHA512
                                                                                                        Submit Download

                                                                                                        81398080-90e5-41a3-aaf1-9cb1b54200b5.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Default\81398080-90e5-41a3-aaf1-9cb1b54200b5.tmp
                                                                                                        • Size 6KB
                                                                                                        • SHA256 8a9e9c92c221a72e225ac5a375d3b0bb79ff627ad5e977b2a8e3f1aede936d9d
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        the-real-index
                                                                                                        • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                        • Size 144B
                                                                                                        • SHA256 28bb77b218b6910f485db525f88af08fcf956b045dff12577cfe56fa37cd6b43
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        the-real-index~RFe5a4373.TMP
                                                                                                        • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5a4373.TMP
                                                                                                        • Size 48B
                                                                                                        • SHA256 d213a23d54b7378ffa72105784fd8193e739bd047705ac23f31d6cbdd37eea86
                                                                                                        • MD5 SHA1 SHA512
                                                                                                        Submit Download

                                                                                                        Network Persistent State
                                                                                                        • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Default\Network\Network Persistent State
                                                                                                        • Size 111B
                                                                                                        • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        Network Persistent State~RFe5b082a.TMP
                                                                                                        • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Default\Network\Network Persistent State~RFe5b082a.TMP
                                                                                                        • Size 59B
                                                                                                        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        SCT Auditing Pending Reports
                                                                                                        • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Default\Network\SCT Auditing Pending Reports
                                                                                                        • Size 2B
                                                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                        • MD5 SHA1 SHA512
                                                                                                        Submit Download

                                                                                                        Preferences
                                                                                                        • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Default\Preferences
                                                                                                        • Size 6KB
                                                                                                        • SHA256 fd039b4ca8a1dbc1ae743da286d2f4adf461852c60e3ab9a6ce67716658184d7
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        CURRENT
                                                                                                        • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Default\Sync Data\LevelDB\CURRENT
                                                                                                        • Size 16B
                                                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                        • MD5 SHA1 SHA512
                                                                                                        Submit Download

                                                                                                        MANIFEST-000001
                                                                                                        • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001
                                                                                                        • Size 41B
                                                                                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                        • MD5 SHA1 SHA512
                                                                                                        Submit Download

                                                                                                        data_0
                                                                                                        • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\GraphiteDawnCache\data_0
                                                                                                        • Size 8KB
                                                                                                        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                        Submit Download

                                                                                                        data_1
                                                                                                        • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\GraphiteDawnCache\data_1
                                                                                                        • Size 264KB
                                                                                                        • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                        Submit Download

                                                                                                        data_2
                                                                                                        • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\GraphiteDawnCache\data_2
                                                                                                        • Size 8KB
                                                                                                        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                        Submit Download

                                                                                                        data_3
                                                                                                        • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\GraphiteDawnCache\data_3
                                                                                                        • Size 8KB
                                                                                                        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                        Submit Download

                                                                                                        Local State
                                                                                                        • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Local State
                                                                                                        • Size 2KB
                                                                                                        • SHA256 9e748563206aae9d46bbb6a347de4641eddf105ad3589cebb39b8475dba257a6
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        Local State
                                                                                                        • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Local State
                                                                                                        • Size 3KB
                                                                                                        • SHA256 cd04ad92cd87508bc0414b54659a3a9b88da9de35f86711e93e2ba4ba30c8db9
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        Local State
                                                                                                        • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Local State
                                                                                                        • Size 15KB
                                                                                                        • SHA256 a11513ac3546165be4af0923b04ad092d3eddb54dcabdd34470e914123dc5322
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        Local State~RFe59e092.TMP
                                                                                                        • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Local State~RFe59e092.TMP
                                                                                                        • Size 1KB
                                                                                                        • SHA256 509bc066926f067c0ae81fa10c1175e73fcf3ca0ba1bfb5691c07f191c033802
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        4e78060e351f612b.customDestinations-ms
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\4e78060e351f612b.customDestinations-ms
                                                                                                        • Size 22KB
                                                                                                        • SHA256 3ee6e66ba80f17ed65ce8c011fc7d53e5d6034aa304eee9005c6a1db5541eeb2
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        4e78060e351f612b.customDestinations-ms
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\4e78060e351f612b.customDestinations-ms
                                                                                                        • Size 22KB
                                                                                                        • SHA256 bab0fda033ef18b43f0b6d5e926e891eeb581fca1092e4989a9e8e91748849d9
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        15f979b6-58d5-4174-b297-8b12d1eafd80.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\15f979b6-58d5-4174-b297-8b12d1eafd80.tmp
                                                                                                        • Size 151B
                                                                                                        • SHA256 983907dd708e5cb1552254217b3ef8eec41b9e2e3f36fc14a3502cc1d4de14f8
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        settings.dat
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                                                                                        • Size 40B
                                                                                                        • SHA256 d0cce81bd83f45299348441b557be96b61b69e7b0cbe9997050fcd22656f0eb9
                                                                                                        • MD5 SHA1 SHA512
                                                                                                        Submit Download

                                                                                                        05195924-81c4-4132-9892-87f9b2d3462c.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\05195924-81c4-4132-9892-87f9b2d3462c.tmp
                                                                                                        • Size 83KB
                                                                                                        • SHA256 473760ecbc6998cc89db8d500125f7cf777114f8e7ab15e2f3aca0983b0792e6
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        05e42f3f-2fe1-45c1-89a0-a43aa06a4701.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\05e42f3f-2fe1-45c1-89a0-a43aa06a4701.tmp
                                                                                                        • Size 171B
                                                                                                        • SHA256 9aedd9558c72fdd8d946637eb2e79cf7d16d4afa112543d5f8e7e743fe28d124
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        094a64bf-e7d2-4efd-be14-dfa2f417971d.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\094a64bf-e7d2-4efd-be14-dfa2f417971d.tmp
                                                                                                        • Size 566KB
                                                                                                        • SHA256 a6aa5dc659ed54c1bdc9bcf9c8a6a73085f47dec1d260539be166727ab98a71f
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        1e78e46e-5377-42b7-a7ed-1c13736c1189.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\1e78e46e-5377-42b7-a7ed-1c13736c1189.tmp
                                                                                                        • Size 357B
                                                                                                        • SHA256 bec624a281be5769d8cee502e598a394742538e6c23988ea8631051195806c9f
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        2d4fa2b9-6dd0-4c9e-938d-d5758b7a1d27.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\2d4fa2b9-6dd0-4c9e-938d-d5758b7a1d27.tmp
                                                                                                        • Size 162KB
                                                                                                        • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        4e97f162-06f6-42e2-9b7e-1240c94529f5.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\4e97f162-06f6-42e2-9b7e-1240c94529f5.tmp
                                                                                                        • Size 173B
                                                                                                        • SHA256 0507a4e55c283d32d45529334c2b3ce16da525624e1b88522975e913716775b1
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        903b9423-f738-48a8-b682-672c2fee0de7.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\903b9423-f738-48a8-b682-672c2fee0de7.tmp
                                                                                                        • Size 10KB
                                                                                                        • SHA256 c7a459343cfcaaa1fa58aed873889961ca17291247a86f42974b1d3ca10d07df
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        Bookmarks
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Bookmarks
                                                                                                        • Size 24KB
                                                                                                        • SHA256 19131ead1b664b267610daa43de2a7e7da3b098cd638b970239f46fd310da456
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        the-real-index
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                        • Size 48B
                                                                                                        • SHA256 3cc4f87c617e6074c332134da4b6abf679098be9c25aa4b634353a77f6076216
                                                                                                        • MD5 SHA1 SHA512
                                                                                                        Submit Download

                                                                                                        the-real-index
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                        • Size 1KB
                                                                                                        • SHA256 9c0351530a3831cf3eb4b3d09d6a83067641e295806ac12f385dc80d696f26f9
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        index
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\wasm\index
                                                                                                        • Size 24B
                                                                                                        • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                        • MD5 SHA1 SHA512
                                                                                                        Submit Download

                                                                                                        messages.json
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\_locales\en\messages.json
                                                                                                        • Size 2KB
                                                                                                        • SHA256 57e2b257a65fa5e980c619214ed9ae25580bbd581143e28abac49928b31977a6
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        background.js
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\background.js
                                                                                                        • Size 17KB
                                                                                                        • SHA256 c7a162a7650887dffe12034ddbba5ddb91ca5bf4f5478f59ded324f7e088bacb
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        twitch16.png
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch16.png
                                                                                                        • Size 370B
                                                                                                        • SHA256 6534efc770a8a32c881258029c2f2b9d9f1b75228f53bf9b4cd2b9a9689884e0
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        twitch48.png
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch48.png
                                                                                                        • Size 921B
                                                                                                        • SHA256 47e37c0726206401cc69cb6ab0fdda79b364356a5e2fdbd5ce479bfbb965f245
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        main.js
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.7_0\main.js
                                                                                                        • Size 46KB
                                                                                                        • SHA256 e1b3123f37dfe988a8a22427e98d06cdf472c23429f6277f68c6eeb1626cd54e
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        manifest.json
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.7_1\manifest.json
                                                                                                        • Size 1KB
                                                                                                        • SHA256 260b3142cfc312fac94098f84da9343a08e2a4d2e8e08d0e0fd4688ea261f4f8
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        background.js
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\1.2.332_0\background.js
                                                                                                        • Size 365KB
                                                                                                        • SHA256 5acb8f0a54c6774e0832d8ee9c7fac2dd593b1a74c89c5f4a9ba3f12d878ebcf
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        icon-57.png
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\1.2.332_0\icons\icon-57.png
                                                                                                        • Size 863B
                                                                                                        • SHA256 7a1ae78e7cb77b74cbaefa5b92ec32384761499375738898e71bd43f018f3a17
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        logo_128.png
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_128.png
                                                                                                        • Size 7KB
                                                                                                        • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        logo_16.png
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_16.png
                                                                                                        • Size 653B
                                                                                                        • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        logo_32.png
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_32.png
                                                                                                        • Size 1KB
                                                                                                        • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        logo_48.png
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_48.png
                                                                                                        • Size 2KB
                                                                                                        • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        logo_64.png
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_64.png
                                                                                                        • Size 2KB
                                                                                                        • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        service-worker-loader.js
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\service-worker-loader.js
                                                                                                        • Size 49B
                                                                                                        • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                                                                        • MD5 SHA1 SHA512
                                                                                                        Submit Download

                                                                                                        favicon_opera_one.png
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.61.0.1_0\favicon_opera_one.png
                                                                                                        • Size 2KB
                                                                                                        • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        reader_mode.js
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.61.0.1_0\reader_mode.js
                                                                                                        • Size 112KB
                                                                                                        • SHA256 af8a91b24637088da1f46285c17f1697365edd15d3e70553b2c1f33a138400b0
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        service_worker.js
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.61.0.1_0\service_worker.js
                                                                                                        • Size 88KB
                                                                                                        • SHA256 4552054a75dcf9361f8ad6384c72c1f1bb19cda708f09811009b9e3ca4519bfd
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        spotify_frame_interceptor.js
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.61.0.1_0\spotify_frame_interceptor.js
                                                                                                        • Size 5KB
                                                                                                        • SHA256 e81ab12e6c536f8c9d64a76be92fcdb63111d241d96974f0472d6751a6f7e3aa
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        messages.json
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\_locales\en\messages.json
                                                                                                        • Size 429B
                                                                                                        • SHA256 c6a7161359e3c4fbc4059b7209c585f9aa2306c08e6c39a3003f4b29f2ceb22d
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        background.js
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                                                                                                        • Size 86KB
                                                                                                        • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        Icon_Dark_Active.png
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Dark_Active.png
                                                                                                        • Size 2KB
                                                                                                        • SHA256 97d9553a4f725354a6d5c3eff11f31285fd89c3b150593f04785b83d0a56efc2
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        Icon_Dark_Available_Red.png
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Dark_Available_Red.png
                                                                                                        • Size 2KB
                                                                                                        • SHA256 9eccebdbdb61efc0cbd8bccf3a5fedc6f9a1ebe5084b160783f90a56cd1efa7b
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        Icon_Dark_Available_Yellow.png
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Dark_Available_Yellow.png
                                                                                                        • Size 2KB
                                                                                                        • SHA256 c165ef60bf3806cd0a7121a8d6cfd06909fc84b38a07d43e809bd7bff564099c
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        Icon_Light_Neutral.png
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                                                                                                        • Size 2KB
                                                                                                        • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        Icon_Dark_Active.png
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\32\Icon_Dark_Active.png
                                                                                                        • Size 883B
                                                                                                        • SHA256 50aa1dcfa9083b57dd6187752b2c149294210be12d263b793d27daf8d431954c
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        Icon_Dark_Available_Red.png
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\32\Icon_Dark_Available_Red.png
                                                                                                        • Size 895B
                                                                                                        • SHA256 2278e95b28851ade57217ab5c7b32598c44e1085693a3e26379643d29fa0a6d1
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        Icon_Dark_Available_Yellow.png
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\32\Icon_Dark_Available_Yellow.png
                                                                                                        • Size 895B
                                                                                                        • SHA256 726a50a9c008449ab7bafbf21325bfc72093b7ae6a56c5be90cf8c32a8a44641
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        Icon_Light_Neutral.png
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\32\Icon_Light_Neutral.png
                                                                                                        • Size 932B
                                                                                                        • SHA256 b8e92f9e9b9dc82799231b8d1b57091a9d0bcdd9b54615f86e8c4e4e5c9f036b
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        index.html
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\index.html
                                                                                                        • Size 222B
                                                                                                        • SHA256 fd21c7ca4637b0221250a14b9fcfb6ebc3b734e659ad80151be4bc579db818f1
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        computed_hashes.json
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_1\_metadata\computed_hashes.json
                                                                                                        • Size 73KB
                                                                                                        • SHA256 6981ab0e6f2328f8b6f583cee4b68ca6cb8359e800387774dac97df21043e0c4
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        verified_contents.json
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_1\_metadata\verified_contents.json
                                                                                                        • Size 6KB
                                                                                                        • SHA256 7962ed372049509eb040645a6a96d37c60414647f7d7c6852d20e183d8fca45d
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        manifest.json
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_1\manifest.json
                                                                                                        • Size 1KB
                                                                                                        • SHA256 4dc8cf07548e8abda9ccaed742ce955a4cce2b524abf4a2a73a5411c22aa567c
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        MANIFEST-000001
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\chrome-extension_jifbgnmbgbdiedhdecealmlgmekpagde_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                        • Size 23B
                                                                                                        • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                        • MD5 SHA1 SHA512
                                                                                                        Submit Download

                                                                                                        069c662a-2b1a-4436-bd54-14de099d51bd.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\069c662a-2b1a-4436-bd54-14de099d51bd.tmp
                                                                                                        • Size 27KB
                                                                                                        • SHA256 cc914b6c8be70f233d533244b1fe41e32c495b9bb57901a96777f7d19fd75dfa
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        48b28f5e-71ea-4966-a435-e743222ec7a4.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\48b28f5e-71ea-4966-a435-e743222ec7a4.tmp
                                                                                                        • Size 27KB
                                                                                                        • SHA256 b79b047aa13202f575c92b513e67530ee9a5de4755d8d67c85c2f156c9a4eb39
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        57de0b38-f42e-4a64-a594-1496753208f3.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\57de0b38-f42e-4a64-a594-1496753208f3.tmp
                                                                                                        • Size 27KB
                                                                                                        • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        82c60454-ae10-4bda-a04d-27f2fc1b3538.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\82c60454-ae10-4bda-a04d-27f2fc1b3538.tmp
                                                                                                        • Size 27KB
                                                                                                        • SHA256 2f1a860dec73e59307d1a8e1b1ace276076ef77008f468720569bfc8d7ba2512
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        c08ea9d2-7429-4296-afc8-0a5a18b773aa.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\c08ea9d2-7429-4296-afc8-0a5a18b773aa.tmp
                                                                                                        • Size 27KB
                                                                                                        • SHA256 353f070543d1c43247d565c23d4c0346a8d65d902aa7bae04c6ae5e64bc5cde7
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        Network Persistent State
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State
                                                                                                        • Size 4KB
                                                                                                        • SHA256 75837f0822a7636bb2334b60c3f38a65cdc2e64d72c869653b3f53ff95b6a766
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        Preferences
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                        • Size 13KB
                                                                                                        • SHA256 a1495e1050624edd2d764f5333fe31dcd3c73bcf9885544de9c9b87ba1166043
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        Preferences
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                        • Size 12KB
                                                                                                        • SHA256 7c8899cd0eb4659a524e60f657c4db647f982e31d99b4e1b9d1be6fb8015992e
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        Preferences
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                        • Size 12KB
                                                                                                        • SHA256 91e0890737bf5f85dc8fb1b1e88fe711796076906a226905c4e11c67259a8094
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        Preferences
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                        • Size 12KB
                                                                                                        • SHA256 6269244d3901b34efdc17afc290616a0a29570081a66c497d8c6f138c60488b2
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        Preferences
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                        • Size 16KB
                                                                                                        • SHA256 9aba68d899ccea7752d7ac679093ccd2642d7df696adef7058edb408393bfdb5
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        Preferences
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                        • Size 12KB
                                                                                                        • SHA256 d819be54be960c34195605802832688704b0a8d7f103e2674f31134301cf11ec
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        Secure Preferences
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
                                                                                                        • Size 84KB
                                                                                                        • SHA256 78feed099178383d5ce25a557188b524bd2de30b420386d6beae518d14f53a4f
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        Secure Preferences
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
                                                                                                        • Size 114KB
                                                                                                        • SHA256 814ef4ec09fd60047320948fdaeed15b850cf93a7cb207d8410094740987c4cb
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        256b16b9-3947-404a-801f-682036ec4f2f.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\256b16b9-3947-404a-801f-682036ec4f2f.tmp
                                                                                                        • Size 72B
                                                                                                        • SHA256 6b742bad914025bee2f3ee353e3b93b79c3a82c7f2f3220d1c2c65f01d07cb0d
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        the-real-index
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                        • Size 552B
                                                                                                        • SHA256 9ad9ea093b7093d29042d5385b405990f2cff03a8723adba398b64ee704e4708
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        the-real-index
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                        • Size 552B
                                                                                                        • SHA256 ddd54e8719a2a9d4e13e99a94c4786b3783e5b7ffac7dea8aa7ff6ff2f7e0a95
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        672f7aff-aab0-4eb5-99d7-0ca21336bc34.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\672f7aff-aab0-4eb5-99d7-0ca21336bc34.tmp
                                                                                                        • Size 429B
                                                                                                        • SHA256 23c46e2bfd640ac190143224326a4f21df3a086ac7fe54731c20778ba97f7997
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 12KB
                                                                                                        • SHA256 edc2d4d9dd50723a56302f9b3151804a3981c1666677fb1ff47e490dd5907405
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 12KB
                                                                                                        • SHA256 3ae6051d43d5c5b2a8573accd6e0f518d46f4a0d8b50fdcf940a4b2773bf9ad0
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 12KB
                                                                                                        • SHA256 a0e270db198b707075416eb872eca815c2930936b732079979f70bc3dc3ba28c
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 12KB
                                                                                                        • SHA256 20b63c5488b47d81b94f7946ac721809c165e68afe7ff8f9534bd1ab964d464f
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 12KB
                                                                                                        • SHA256 2f0b6b443e43ecf5c122357020c783cfe7e63d229800f2b3859f0f47332a80ce
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 12KB
                                                                                                        • SHA256 66b8843cc8afdaa65cb4863057be458213d1b1057d707e070e332174ce31932b
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 12KB
                                                                                                        • SHA256 4c340e5afb28e6e7d225a8cf0666ef824208d7033a8284d51d9f50eadd2b145d
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 12KB
                                                                                                        • SHA256 6e4a09eed13bb7a9d9e43f47b0ac23caf8504a6b39ccedb23032ee669a80d946
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 12KB
                                                                                                        • SHA256 54e44bca671fe503e895559e5b0613ea7053c340f738014a111cfd13a7e3f4cc
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 12KB
                                                                                                        • SHA256 7ee13fb5db0b54c73dadf872df00428573f783173bab1fda0d868d43176d6377
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 2KB
                                                                                                        • SHA256 a3fb0ad5b3eb2d75dc5c1d48f9727de1fbe7a716b2e37490667708ceaf288532
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 8KB
                                                                                                        • SHA256 d15dc5d4c98e711bbb0a0bb2724dc29eac81dd03a1a03185ccef64ad46ad5211
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 9KB
                                                                                                        • SHA256 650349fe6c9613f82f930976ec05e5c2a970fa83b55816f33052a0b648290d38
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 11KB
                                                                                                        • SHA256 ca13f14f10358a12dd11d6cc173446e63d4f46c6f61b0b4b85653a29599fe84a
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 781B
                                                                                                        • SHA256 407671dd3595564bb2095b1e54c5b96ff1721cec728f721d3645a50bdd9e3434
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 957B
                                                                                                        • SHA256 47dc75d3019376738498609cc322b7d05a1ce69b3f284407eb55fd1316a1b147
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 2KB
                                                                                                        • SHA256 0d421f762f787c5da5c45f3671098f6ce316a9e88770345da8b4b1de7ac6a563
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 2KB
                                                                                                        • SHA256 49689c14c42318063e6e70b4b6ee7f368158518939808632efdf89dc3a37115c
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 2KB
                                                                                                        • SHA256 100e1a8ba983d955776756e4dc2dc27a72b1ee99db920bd6de41e7d408ed5286
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 7KB
                                                                                                        • SHA256 4ce4bc17f0901ea36721f946853b59dc3c2985eefc86e1f3fcd3f8a082bab0ba
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 8KB
                                                                                                        • SHA256 ad7de57eaf731ac0680f7de47cba0566e8cb5b297e517083b06217ef2c9a1468
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 9KB
                                                                                                        • SHA256 778801a34dfbdaa8137806e5e49338e3738ea66a1947676d8248665e1c80fb3e
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 9KB
                                                                                                        • SHA256 f8c2cc01ef3c56cd1df5269aa349a968e8de92d9e9c59930a388cd8ad458e717
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 10KB
                                                                                                        • SHA256 d8e2c0c564e9b8fce03803c7c11f2f6de40ae4e116e5c52f2d0f0f3ed4f93b38
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 10KB
                                                                                                        • SHA256 4e27d355e066a47bd9a31ca643c0d7d5634edc3e07a07beecd8a35cb3d1eaa68
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 10KB
                                                                                                        • SHA256 a5fc17fd720c30506bcc95faca2d401cccf4eed23616080c08e50f69a4062df6
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 10KB
                                                                                                        • SHA256 a6475d42b7ab9fa18cc3947a451b753bbcd31507e9edb7f6e43bffe8720d8386
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 10KB
                                                                                                        • SHA256 0df57dc9e531248a39153895f20e49214541d020a5833999aa022ddeac8e81f3
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 10KB
                                                                                                        • SHA256 314981526086a0e5a6cca175b34291aafacbe8cc9fafcf65c18c7fb5d4483d4a
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 10KB
                                                                                                        • SHA256 fc8109e8e5149e93a1ab4ddd7d3e0a2cf8be55a66544c939c1cdf98d6f663a31
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 10KB
                                                                                                        • SHA256 adb674163794a2ba3dc3048257b42d7df0c40b5579c01a8dbcb078728f9dfbdf
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 10KB
                                                                                                        • SHA256 e69efb2a2f63f4605f382c5f6bc04de35d7bd502fcfdbcc1829967eb46345b5d
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 10KB
                                                                                                        • SHA256 578aa241142a60fcd9b75eceb66540569df6489b365bde27698aaa66920d7ccf
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 10KB
                                                                                                        • SHA256 aace78a41689999ac8972c65d459951bdde2d3673cdb658af29cd9ef2a2c8542
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 10KB
                                                                                                        • SHA256 24c10cc596af3b232717fbe4809087d90f83d4397ae79ce7db3946ba821f2df3
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 10KB
                                                                                                        • SHA256 923c915dc29dfd1c7b8faa433504d47cb96c6c258b2ee4ce76816538fb45da5c
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 10KB
                                                                                                        • SHA256 9e4d35ea0da543f935723fc55cb2184d291cdc6b70b2ee62c9c3965518a11f8d
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 10KB
                                                                                                        • SHA256 5652749773ac52febf0283664acfad1cee950cdc3bf3b95eeac16600683de752
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 10KB
                                                                                                        • SHA256 466ea996478b80de9409c823a3cac76f3045a6e855d8e6b4389326eb714f4c8e
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 10KB
                                                                                                        • SHA256 74801ff157f3d4fb0a5ad9a110c6b7d79b9efff57d9b38c413cbd5de3a51f4fb
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 10KB
                                                                                                        • SHA256 8ab7f5eebc9b7c4a40abcd9f08c94efb745d61a69a01b3d3f9fd180d2213cc37
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 10KB
                                                                                                        • SHA256 4d756069caee762090a6c23f2cd991b7a1f2ca33cb2e341addae4f4dc5008ada
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 10KB
                                                                                                        • SHA256 7f508ed40418dba84b9fe4076ef148974061c7a8228f809168bc43c1ec30f59a
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 11KB
                                                                                                        • SHA256 8243e80050388073b3969fee6085521a44419d332cb71d5c0f881de3004f18a1
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 11KB
                                                                                                        • SHA256 fce766a98ff82d5c42a3efd50e0cc9da9503ac7f642a2e6fb73a4dcb03243b83
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 11KB
                                                                                                        • SHA256 700bfb66eb3207a0c23bbb261bcf98956292c12bab2dd58c9a132f929fb889be
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 541B
                                                                                                        • SHA256 783f7c8e85a7d4be96846caa61a4b1f44d51a31e6a326e55b77a4e0dbf73fead
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 653B
                                                                                                        • SHA256 506ab30c82631bb258c4154748e7089974bd894bda70cbba3571b5c27feef47c
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 8KB
                                                                                                        • SHA256 84eb84535d81ede0d66d5e1efcce72628df1efdc90d6fc52b6a6b83cd4eb2d1d
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 1KB
                                                                                                        • SHA256 202d0a85ee6454f4e5d7387367327a4f7e7b0a1bd74ac3eabe22c07c5325eda9
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 1KB
                                                                                                        • SHA256 51e11ac4efc014dd1f3ac32c87dbd0b19e54571dc0e9785a036c389c7dd05a87
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 1KB
                                                                                                        • SHA256 b480091e142662efb199cfec05f3faaf23671b1d82ce61fa3b54db2dcd11bbe8
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 1KB
                                                                                                        • SHA256 3c3c466129e9a054d4fd04370ddaab57a729fd7e526d23754d9f91a0a6b51767
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 1KB
                                                                                                        • SHA256 185548cced443261d35e9cbb4bd4efc47420352fb15d73b2cfa6c52890e1141e
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 1KB
                                                                                                        • SHA256 1f8715930a789723749804b8bf272cd74357283995133e7658207ff5abae10ca
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 1KB
                                                                                                        • SHA256 64172d84f674ba8ff4b577103c5465c0e38c1b3b1bdcb9ce22cedf0e1fa51025
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 2KB
                                                                                                        • SHA256 07f086dc1adfda3e109fd970cd60fd187be0037a7519bef07df252ddea4c2907
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 2KB
                                                                                                        • SHA256 d92150c7f99b253b7141aee5bc66f60f366553ba7c77886b1910156ec0c034d5
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 9KB
                                                                                                        • SHA256 0b8e437e55770bb72c79f821f798c7618355e20cb39cfa46ec2d877590d92901
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 9KB
                                                                                                        • SHA256 729390355eae410246eefa16dab13ad552f0432fb919b3f945f585a65f1e6a6c
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 9KB
                                                                                                        • SHA256 c463890aa0fbf886e2b268cf6371c13225857db6479ae24a46b44c3e408c3c14
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 9KB
                                                                                                        • SHA256 0ca07893576f2bafbb8f64f68256fc4385333c8cae3cebbb5c75e8b35b5b8f07
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 9KB
                                                                                                        • SHA256 50c395c09eb135ff4966c93cb209c7069935ee3fc8c88a8af93feb75e9a00eeb
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 12KB
                                                                                                        • SHA256 653bf50c50575800beec3b1cde7a2c91b18eab51586aad251f7ad90ff7b0f2bb
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 12KB
                                                                                                        • SHA256 ad92dfd97835a60dfd9c1d37d665dfaa647856f05f21f357dd3d9aeed31d438a
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 11KB
                                                                                                        • SHA256 b2b12af9a617efc2af01aa620126c731a9e5083d9e36e7e065e5310f673dfadb
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 12KB
                                                                                                        • SHA256 d71e207389c1a608d529a120fb37e380d25d315c37bbd59048b0aaea4ba6b8d8
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 11KB
                                                                                                        • SHA256 eeddc7a2d927cd6cf7059bb8b184867ecae9dd929a30a66c5e2cffca1007dee8
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 11KB
                                                                                                        • SHA256 f21b0c5fd5c09a95d711e221edcb77db90f7fb59ea3588d7c20e9c3bb68ee638
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 1KB
                                                                                                        • SHA256 e9641d3b9e0fcf3f74aba9afeb8788f330d6c89146c64c1ac76408ad17c66579
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 9KB
                                                                                                        • SHA256 53011951338bcc5621242da37146ae09815a374b702099045733c90781010ee4
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 11KB
                                                                                                        • SHA256 2db9d56161132b85472ece38c2809f8ee02b8c2e5c282c67e8738ab71f314df6
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 11KB
                                                                                                        • SHA256 5e1b391ae53acde2e7314294b2c968dccf2dbd765f6d29b1b565126b2e9178df
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 11KB
                                                                                                        • SHA256 4067176ca1f01dd9e8c4c7980b598eb1747366bb981149ec299d6bf495116f8e
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 9KB
                                                                                                        • SHA256 d8250c76006fba12293c608c63647ecd83b37047b46af8b22624e285c615be32
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d758bd33-8bc1-4555-b550-5ed69394765a.raw
                                                                                                        • Size 11KB
                                                                                                        • SHA256 088e7560b938269e1b09f96e65f468e9720521185be4e610211b0d1bc92ba319
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        ac804380-89d7-4c18-8081-d19bed71372d.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ac804380-89d7-4c18-8081-d19bed71372d.tmp
                                                                                                        • Size 23KB
                                                                                                        • SHA256 947162eba44f79f8d94509e34ad0e163e0a6244c3e6d8d233ef359947c8ebbe8
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.0.237672760
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.0.237672760
                                                                                                        • Size 2KB
                                                                                                        • SHA256 929ef410d029d4b9b4edc12a8dd17b906948432c2276371b48345beea918bde3
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.0.237672760
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.0.237672760
                                                                                                        • Size 455B
                                                                                                        • SHA256 a1a2a108d581e9712e1f448f37c11a5f7e25c2b615e266c92f1c90718b74cf39
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.0.237672760
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.0.237672760
                                                                                                        • Size 517B
                                                                                                        • SHA256 d960e315ac2862499b040cf10fbe69f1bf44386b74bec648e4c6b95382ca4a93
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.0.237672760
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.0.237672760
                                                                                                        • Size 1KB
                                                                                                        • SHA256 e04a93e1312f7ed7008198e2908e332fb50276080c3ff70703bc3a311357ddfe
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.0.237672760
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.0.237672760
                                                                                                        • Size 2KB
                                                                                                        • SHA256 0a746a2d07d1df97d3df738805cca4c8f17d6dabc2a29327c12813094e1dbd40
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.0.237672760
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.0.237672760
                                                                                                        • Size 2KB
                                                                                                        • SHA256 f9de89b11b62a1d595a214b57ef312d9327bf897c5f8ed9dd9e35ad274653a73
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.0.237672760
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.0.237672760
                                                                                                        • Size 2KB
                                                                                                        • SHA256 3940c7ff0bf5b9605877ce6627596b6870ec082af14bafd1bce1d8a9026652c6
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.0.237672760
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.0.237672760
                                                                                                        • Size 2KB
                                                                                                        • SHA256 e1aeb78011d4c8431073fa1ce47c65852b33d3fc6cb21a594269161d9b6727de
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.0.237672760
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.0.237672760
                                                                                                        • Size 2KB
                                                                                                        • SHA256 e23ec667969d7d16c851c6df56997fe691832ed1591a718b3103d06e362f63c8
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.0.237672760
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.0.237672760
                                                                                                        • Size 2KB
                                                                                                        • SHA256 32e16c31dc0eeab201b518fee9b8de2bd426743334212c3d93349c1f83c26e88
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.0.237672760
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.0.237672760
                                                                                                        • Size 2KB
                                                                                                        • SHA256 8a46d4a5753c0d8f6c62f73b8dc3415d95669104806f9ef316e1804e3075af1c
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 1KB
                                                                                                        • SHA256 b6c29e6c24511381430aced6b4523fb9bddf7e0c8f745b679cb9d9f0c2c7af78
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 3KB
                                                                                                        • SHA256 a1411b2f19def0dd61e1d8152b052e9eaad1a6c6817bdcd9daff4708d0502cf8
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 3KB
                                                                                                        • SHA256 a93f73cdf1c62cc6a6a286e512fd9cebcb546d9e8201f9e7181b3fc12759d915
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 3KB
                                                                                                        • SHA256 66c158b60dfd39574bb97da336ebb6d6f4be5c17191315cae0f05d08d69a25ed
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 3KB
                                                                                                        • SHA256 91d9475a37a923cb137daedde8793c1b4e2a738379b9e2d962a5c2701675b740
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 3KB
                                                                                                        • SHA256 8e7f5b7c3a0d39d44ae93c0e81378e55379ecb539a16ea207573ac80ecee3dc0
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 3KB
                                                                                                        • SHA256 d3feac239b6543ba7b01398364335ebe936cb081ccfbc080ff3cefe9b2c1fec4
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 4KB
                                                                                                        • SHA256 ad54565aa94d8176db46559615caa68b4d9cfe961d4b77b85348ce5b6990c2ea
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 4KB
                                                                                                        • SHA256 33ba9a856369d6059b5f606d4a0f46d9eed6c8b53b648e1804d05ff77a930aaf
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 1KB
                                                                                                        • SHA256 f8b605724ed4c1c22514284bd17fb2149330c38046c948b9195067a19c07abd5
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 2KB
                                                                                                        • SHA256 42831ff949ff676e9200b111841adbbd181dffcf8d00430716973a9ebc32b733
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 1KB
                                                                                                        • SHA256 af1e1821bd35fb66876f8735cf5cc654a1e5266bef49233d973a8681860f505f
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 200B
                                                                                                        • SHA256 5162d28aa85e1eb2f13b0d6b3bcb56857beba2d77002c660e4693305ef52bb3f
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 1KB
                                                                                                        • SHA256 d614963a3101e5772f2fc9a01df6fc85efe84bdd913ddd21b20de6140796a42f
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 1KB
                                                                                                        • SHA256 2748748013ef1c2b31ba60fc8ebd1b4f407b5ebf6c8e8cd4448ddbbe0da369b7
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 1KB
                                                                                                        • SHA256 9dc78ee8c893e1efa803d29097aec1e41ca55ce2a2c0fb6d4c49fb6a3e11252e
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 325B
                                                                                                        • SHA256 5da19d0ed90597508402976c7130f381048d356f749074f80c89f00c3a9d020c
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 418B
                                                                                                        • SHA256 3dc71604299ce9e94b432fd71405ff6f56f3d8e71b90395b7c3a778e66ce487e
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 510B
                                                                                                        • SHA256 afc28da31945b4d2d201a0966f57648917c14e08b85dfe68ba7d87b1cce919a6
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 692B
                                                                                                        • SHA256 28d2fa77763ebb82f0b624347cee3918f39f8e3cbc3981fa7e3e32c894da6f0d
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 783B
                                                                                                        • SHA256 2086a6c18c4c213cd051485dd05111d0d8435d09b3c6e2cc61cf1bb5d2dcc412
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 876B
                                                                                                        • SHA256 2036ddd8209dbf6d3c80000c43e2116557b71de7b04f05b0fafda8690d7e843c
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 968B
                                                                                                        • SHA256 b4526908d924d18d4f1362d4fdfb3116945a884266d3aea14fd899699030f79b
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 1KB
                                                                                                        • SHA256 fee50f01b0e5e7bcef226d53af0da8f4909740abe68c2c15da53f13c4409a8b8
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 1KB
                                                                                                        • SHA256 c438d8515e42d5e7bd6eda8c4bded7ff596b4f6ac6d3f4dabb2f5a51d861aa49
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.1.1064939853
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.1.1064939853
                                                                                                        • Size 603B
                                                                                                        • SHA256 99f749886982909dd0ce96baf9c40478075f1abbd9103e1d68101a0bb2afbce3
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        ssdfp4872.2.1855176326
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4872.2.1855176326
                                                                                                        • Size 217B
                                                                                                        • SHA256 200e39bf482e81d1684d8dd695d9cf3a627acaa64ffe35b72f370f8c32395a52
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        Local State
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                        • Size 4KB
                                                                                                        • SHA256 488d802dd7e36e9f41add801b6c939ce6badc209de09def11af4d85ca1965155
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        Local State
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                        • Size 3KB
                                                                                                        • SHA256 99469ecaa0910f6cb33aac7687915bbb39beea9f103c677eff6b2bf72bc81f90
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        Local State
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                        • Size 4KB
                                                                                                        • SHA256 bfa9ab3eed66e989d2905e3c4101e1d0d30b389622f5c65116723efde722deb3
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        Local State
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                        • Size 3KB
                                                                                                        • SHA256 0a7f45bd5728505fc0e8404134635e1c7c2a7e9dcf52775b1fc1763355e43b86
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        assistant_prefs.json
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\assistant_prefs.json
                                                                                                        • Size 151B
                                                                                                        • SHA256 a02e76c4ee38260ac9959d240b1a5750845990b81ee56f9d80fe5574628ed1c6
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        25392f3e-e746-482b-8f42-a372847844d2.tmp
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\25392f3e-e746-482b-8f42-a372847844d2.tmp
                                                                                                        • Size 124B
                                                                                                        • SHA256 b7940406aa4e4ef24238ed2a8cfd2576e3e10cdc5716e58f62f3d86546887f2e
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        metadata.json
                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                                                        • Size 13B
                                                                                                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                        • MD5 SHA1 SHA512
                                                                                                        Submit Download

                                                                                                        hyph-bn.hyb
                                                                                                        • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3400_1051297738\hyph-bn.hyb
                                                                                                        • Size 703B
                                                                                                        • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        hyph-mr.hyb
                                                                                                        • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3400_1051297738\hyph-mr.hyb
                                                                                                        • Size 687B
                                                                                                        • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        hyph-nn.hyb
                                                                                                        • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3400_1051297738\hyph-nn.hyb
                                                                                                        • Size 141KB
                                                                                                        • SHA256 5bcbb58eaf65f13f6d039244d942f37c127344e3a0a2e6c32d08236945132809
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                        Submit Download

                                                                                                        LICENSE
                                                                                                        • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3400_1867016805\LICENSE
                                                                                                        • Size 473B
                                                                                                        • SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        verified_contents.json
                                                                                                        • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3400_1867016805\_metadata\verified_contents.json
                                                                                                        • Size 1KB
                                                                                                        • SHA256 afc120295fd54e5dbe43fb66c87f3239a03fed4b3653617039b79172862de61b
                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                        Submit Download

                                                                                                        Other
                                                                                                        • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3400_2136827793\Mu\Other
                                                                                                        • Size 34B
                                                                                                        • SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
                                                                                                        • MD5 SHA1 SHA512
                                                                                                        Submit Download

                                                                                                        memory/2032-3688-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-4845-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-5125-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-5124-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-5123-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-5033-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-3559-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-4998-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-4546-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-3878-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-389-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-3825-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-4571-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-4929-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-4928-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-4878-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-4865-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-4814-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-135-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-349-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-4632-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-4599-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-4574-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-4573-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-651-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2032-4992-0x0000020FAAB50000-0x0000020FAB2BD000-memory.dmp
                                                                                                        Download

                                                                                                        memory/2952-242-0x00007FFFCDD30000-0x00007FFFCDD31000-memory.dmp
                                                                                                        Download

                                                                                                        memory/3188-166-0x00007FFFCDD30000-0x00007FFFCDD31000-memory.dmp
                                                                                                        Download

                                                                                                        memory/4700-758-0x00007FFFCD9A0000-0x00007FFFCD9A1000-memory.dmp
                                                                                                        Download

                                                                                                        memory/4700-757-0x00007FFFCDD30000-0x00007FFFCDD31000-memory.dmp
                                                                                                        Download

                                                                                                        memory/7992-4077-0x000001B0FFD30000-0x000001B0FFD31000-memory.dmp
                                                                                                        Download

                                                                                                        memory/7992-4087-0x000001B0FFD30000-0x000001B0FFD31000-memory.dmp
                                                                                                        Download

                                                                                                        memory/7992-4084-0x000001B0FFD30000-0x000001B0FFD31000-memory.dmp
                                                                                                        Download

                                                                                                        memory/7992-4086-0x000001B0FFD30000-0x000001B0FFD31000-memory.dmp
                                                                                                        Download

                                                                                                        memory/7992-4085-0x000001B0FFD30000-0x000001B0FFD31000-memory.dmp
                                                                                                        Download

                                                                                                        memory/7992-4083-0x000001B0FFD30000-0x000001B0FFD31000-memory.dmp
                                                                                                        Download

                                                                                                        memory/7992-4075-0x000001B0FFD30000-0x000001B0FFD31000-memory.dmp
                                                                                                        Download

                                                                                                        memory/8232-1794-0x00007FFFCD9A0000-0x00007FFFCD9A1000-memory.dmp
                                                                                                        Download

                                                                                                        memory/8232-1918-0x00007FFFCDD30000-0x00007FFFCDD31000-memory.dmp
                                                                                                        Download

                                                                                                        memory/9220-3665-0x0000025701BA0000-0x0000025701BA1000-memory.dmp
                                                                                                        Download

                                                                                                        memory/9220-3668-0x0000025701BA0000-0x0000025701BA1000-memory.dmp
                                                                                                        Download

                                                                                                        memory/9220-3658-0x0000025701BA0000-0x0000025701BA1000-memory.dmp
                                                                                                        Download

                                                                                                        memory/9220-3667-0x0000025701BA0000-0x0000025701BA1000-memory.dmp
                                                                                                        Download

                                                                                                        memory/9220-3666-0x0000025701BA0000-0x0000025701BA1000-memory.dmp
                                                                                                        Download

                                                                                                        memory/9220-3664-0x0000025701BA0000-0x0000025701BA1000-memory.dmp
                                                                                                        Download

                                                                                                        memory/9220-3669-0x0000025701BA0000-0x0000025701BA1000-memory.dmp
                                                                                                        Download

                                                                                                        memory/9220-3660-0x0000025701BA0000-0x0000025701BA1000-memory.dmp
                                                                                                        Download

                                                                                                        memory/9352-4658-0x0000014602A30000-0x0000014602A50000-memory.dmp
                                                                                                        Download

                                                                                                        memory/9352-4661-0x0000014602F00000-0x0000014603000000-memory.dmp
                                                                                                        Download

                                                                                                        memory/9352-4666-0x0000014602C70000-0x0000014602C90000-memory.dmp
                                                                                                        Download

                                                                                                        memory/9352-4680-0x0000014614210000-0x0000014614230000-memory.dmp
                                                                                                        Download

                                                                                                        memory/9352-4636-0x00000146001E0000-0x00000146002E0000-memory.dmp
                                                                                                        Download