Overview

overview

8

Static

static

3

OperaGXSetup.exe

windows10-2004-x64

8

OperaGXSetup.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    899s
  • max time network
    799s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    28/08/2026, 12:49

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaGXSetup.exe
  • Size 3.9MB
  • Sample260828-p2schada22
  • SHA256 555c80c877f11842954059c8b48060dbedeb6d45d2d52b8e4a33a8adb2a03569
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Checks computer location settings 2 TTPs 35 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 46 IoCs
  • Modifies system certificate store 2 TTPs 7 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 34 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 35 IoCs
  • Suspicious use of SendNotifyMessage 43 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaGXSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaGXSetup.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:724
    • C:\Users\Admin\AppData\Local\Temp\7zS4D23C238\installer.exe
      C:\Users\Admin\AppData\Local\Temp\7zS4D23C238\installer.exe --server-tracking-blob=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
      2⤵
      • Downloads MZ/PE file
      • Executes dropped EXE
      • Enumerates connected drives
      • Modifies system certificate store
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2212
      • C:\Users\Admin\AppData\Local\Temp\7zS4D23C238\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS4D23C238\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.57 --initial-client-data=0x26c,0x270,0x274,0x248,0x278,0x7ff7832b1608,0x7ff7832b1618,0x7ff7832b1628
        3⤵
        • Executes dropped EXE
        PID:1848
      • C:\Users\Admin\AppData\Local\Temp\.opera\38746828-0f1b-4326-96ca-cdc8954ef98b Opera GX Installer Temp\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\.opera\38746828-0f1b-4326-96ca-cdc8954ef98b Opera GX Installer Temp\installer.exe" --version
        3⤵
        • Executes dropped EXE
        PID:2944
      • C:\Users\Admin\AppData\Local\Temp\7zS4D23C238\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\7zS4D23C238\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=2212 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\38746828-0f1b-4326-96ca-cdc8954ef98b Opera GX Installer Temp\opera_package_20260828134958" --session-guid=7d88232e-07d2-4519-81bd-9083ff7366ac --server-tracking-blob="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 " --desktopshortcut=1 --wait-for-package --initial-proc-handle=D808000000000000
        3⤵
        • Executes dropped EXE
        • Enumerates connected drives
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:1776
        • C:\Users\Admin\AppData\Local\Temp\7zS4D23C238\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS4D23C238\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.57 --initial-client-data=0x278,0x27c,0x280,0x248,0x284,0x7ff7832b1608,0x7ff7832b1618,0x7ff7832b1628
          4⤵
          • Executes dropped EXE
          PID:2432
        • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\installer.exe
          "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\installer.exe" --backend --initial-pid=2212 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\38746828-0f1b-4326-96ca-cdc8954ef98b Opera GX Installer Temp\opera_package_202608281349581" --session-guid=7d88232e-07d2-4519-81bd-9083ff7366ac --server-tracking-blob="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 " --desktopshortcut=1 --install-subfolder=134.0.5954.67
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Modifies registry class
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:4156
          • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x26c,0x270,0x274,0x248,0x278,0x7ff6734abd88,0x7ff6734abd94,0x7ff6734abda0
            5⤵
            • Executes dropped EXE
            PID:4408
          • C:\Users\Admin\AppData\Local\Temp\.opera\38746828-0f1b-4326-96ca-cdc8954ef98b Opera GX Installer Temp\opera_package_202608281349581\assistant\assistant_installer.exe
            "C:\Users\Admin\AppData\Local\Temp\.opera\38746828-0f1b-4326-96ca-cdc8954ef98b Opera GX Installer Temp\opera_package_202608281349581\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Adds Run key to start application
            • System Location Discovery: System Language Discovery
            • Modifies Internet Explorer settings
            • Suspicious use of WriteProcessMemory
            PID:4236
            • C:\Users\Admin\AppData\Local\Temp\.opera\38746828-0f1b-4326-96ca-cdc8954ef98b Opera GX Installer Temp\opera_package_202608281349581\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\38746828-0f1b-4326-96ca-cdc8954ef98b Opera GX Installer Temp\opera_package_202608281349581\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x224,0x228,0x22c,0x200,0x230,0xeecb80,0xeecb8c,0xeecb98
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              PID:1852
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Enumerates system info in registry
              • Suspicious use of WriteProcessMemory
              PID:1732
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x2dcb80,0x2dcb8c,0x2dcb98
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:2676
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of SendNotifyMessage
                • Suspicious use of WriteProcessMemory
                PID:2728
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Suspicious use of WriteProcessMemory
                  PID:4004
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x18c,0x13c,0x144,0x188,0x140,0x7ffcd7375310,0x7ffcd7375320,0x7ffcd7375330
                    9⤵
                    • Executes dropped EXE
                    PID:4216
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Suspicious use of WriteProcessMemory
                  PID:2356
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x184,0x188,0x18c,0x180,0x190,0x7ffcd7375310,0x7ffcd7375320,0x7ffcd7375330
                    9⤵
                    • Executes dropped EXE
                    PID:4220
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x274,0x278,0x27c,0x250,0x280,0x57e2bc,0x57e2c8,0x57e2d4
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of WriteProcessMemory
                  PID:212
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:3180
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x174,0x178,0x170,0x140,0x16c,0x7ffcd7375310,0x7ffcd7375320,0x7ffcd7375330
                      10⤵
                      • Executes dropped EXE
                      PID:2588
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:1528
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x174,0x178,0x170,0x140,0x16c,0x7ffcd7375310,0x7ffcd7375320,0x7ffcd7375330
                      10⤵
                      • Executes dropped EXE
                      PID:2204
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:4300
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x174,0x178,0x170,0x140,0x16c,0x7ffcd7375310,0x7ffcd7375320,0x7ffcd7375330
                      10⤵
                      • Executes dropped EXE
                      PID:4680
          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            • Adds Run key to start application
            • Drops file in Program Files directory
            • Checks processor information in registry
            • Enumerates system info in registry
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of WriteProcessMemory
            PID:4956
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x1a0,0x1a4,0x1a8,0x19c,0x1ac,0x7ffcd7375310,0x7ffcd7375320,0x7ffcd7375330
              6⤵
              • Executes dropped EXE
              PID:5076
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1692,i,694715065105382328,11637958634342247372,262144 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1856 /prefetch:2
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:564
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=2120,i,1551175423080942136,1579649542706745276,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2124 /prefetch:3
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Time Discovery
              PID:3352
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=2404,i,2536016464338113924,17670763231735663148,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2436 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:3460
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3192,i,1733760810124284279,12271281895692837395,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3268 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:4172
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3204,i,5470602056628110073,10181146663790638680,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3288 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:2448
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3216,i,15802458642172799099,2123200961917352030,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3300 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:1592
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3240,i,2979989524391533973,13351364199290080274,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3336 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:928
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3252,i,13065374500729529422,10446003062456486579,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3364 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:3432
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3228,i,4484050821496777361,17613927677562074625,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3328 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:5128
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3784,i,5192513505964264071,11692264886813061389,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3792 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5208
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_gx_splash.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
              6⤵
              • Executes dropped EXE
              PID:5936
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4628,i,8935905639003385777,14773597005203650050,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4648 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:6032
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4820,i,3923085041355557733,4486721508835234704,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4864 /prefetch:2
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              PID:6048
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5000,i,14599548160441042689,8562781981088660879,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5008 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              PID:6108
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5220,i,5041841215023998796,6690719984622663620,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5236 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              PID:6136
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=4620,i,7399380280194575788,774874862514279455,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5352 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:2572
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=4624,i,9999520858688857145,13757046568628609697,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5364 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:536
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5356,i,15443901627680823323,5442656863631394408,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5460 /prefetch:8
              6⤵
              • Executes dropped EXE
              PID:5192
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5360,i,11941519617064604273,1210941136625892589,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5468 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:5200
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6348,i,17708310038995486864,3682949691566633911,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6308 /prefetch:2
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:5420
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5504,i,16394505301927051756,16730122167152347570,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6660 /prefetch:2
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              PID:5396
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6844,i,9963723943525266318,9742245737452206276,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6856 /prefetch:2
              6⤵
              • Checks computer location settings
              PID:5392
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6656,i,2977875862385892769,13685290543795696573,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5212 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              PID:4148
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=6640,i,4461962187339004113,17884810965890380289,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=6536 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6560
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7004,i,3735467502970893776,1110498290236956294,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7292 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6612
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7016,i,16546971136651960653,15921736494236677449,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7316 /prefetch:8
              6⤵
              • Executes dropped EXE
              PID:6620
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=6628,i,4190010054222016752,6630860400316822565,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7336 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6628
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7564,i,15428465633764884880,10057866186007391420,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7716 /prefetch:8
              6⤵
              • Executes dropped EXE
              PID:6648
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7888,i,4960425553690854711,275698805875087774,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7900 /prefetch:8
              6⤵
              • Enumerates system info in registry
              PID:6696
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7864,i,9971316516800031516,11430310668214152267,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=7920 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6704
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8052,i,5403012894574698659,9467268956828979165,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8060 /prefetch:8
              6⤵
              • Executes dropped EXE
              PID:6716
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8200,i,13797684011809958945,3471350319721380514,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8212 /prefetch:8
              6⤵
              • Executes dropped EXE
              PID:6728
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8352,i,15734315645083774718,6716715151812930174,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8320 /prefetch:8
              6⤵
              • Executes dropped EXE
              PID:6740
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8524,i,3114123053760332267,3205488377125745855,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8364 /prefetch:8
              6⤵
              • Executes dropped EXE
              PID:6752
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8672,i,9784603810230426796,15405993870575616298,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8688 /prefetch:8
              6⤵
              • Executes dropped EXE
              PID:6788
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8836,i,9111227413877422897,1825157791163818682,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8848 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6804
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8996,i,7403193797278580841,2607815252050813995,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9012 /prefetch:8
              6⤵
                PID:6816
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=9264,i,989789646510830801,4555656930791076385,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9276 /prefetch:8
                6⤵
                  PID:6848
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=9248,i,1626032330674934998,12700559323048336340,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9432 /prefetch:2
                  6⤵
                  • Checks computer location settings
                  PID:6860
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=9456,i,10739329822076966579,2594789628124453381,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9684 /prefetch:8
                  6⤵
                    PID:7476
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
                    6⤵
                    • Enumerates system info in registry
                    PID:6940
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x278,0x27c,0x280,0x254,0x284,0x7ff74f0d38d0,0x7ff74f0d38dc,0x7ff74f0d38e8
                      7⤵
                        PID:6348
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=10352,i,3173006486364761975,16316851777578773265,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10244 /prefetch:8
                      6⤵
                        PID:7212
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=10284,i,13296274752584129168,9845412384519515966,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10488 /prefetch:8
                        6⤵
                        • Enumerates system info in registry
                        PID:4052
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=10632,i,14317568494584939756,1028307032361465486,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10636 /prefetch:1
                        6⤵
                        • Checks computer location settings
                        • Enumerates system info in registry
                        PID:6368
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\installer.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\installer.exe" --fix-taskbar-pins
                        6⤵
                          PID:7400
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\installer.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x264,0x268,0x26c,0x240,0x270,0x7ff6734abd88,0x7ff6734abd94,0x7ff6734abda0
                            7⤵
                              PID:7700
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5484,i,5630195937248805856,5067043066501143169,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=10836 /prefetch:8
                            6⤵
                              PID:7420
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=10860,i,7177600211437493872,11173205996784098338,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=10864 /prefetch:8
                              6⤵
                              • Enumerates system info in registry
                              PID:6572
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3828,i,2631946923685547123,3889793132572377940,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=9400 /prefetch:8
                              6⤵
                                PID:7796
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=4180,i,2898143199315790877,2651291356852877845,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=8980 /prefetch:8
                                6⤵
                                • Enumerates system info in registry
                                PID:7788
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8824,i,1381424040571514676,3948043377166488241,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=10664 /prefetch:8
                                6⤵
                                • Enumerates system info in registry
                                PID:7832
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=9672,i,8910624067241326152,16417685695479058939,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=10652 /prefetch:8
                                6⤵
                                  PID:7864
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=9096,i,13176189651501472160,5587773063489560346,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=10364 /prefetch:2
                                  6⤵
                                  • Checks computer location settings
                                  • Enumerates system info in registry
                                  PID:7256
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=10836,i,8619015629157847850,14759514287364901754,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=9100 /prefetch:8
                                  6⤵
                                  • Enumerates system info in registry
                                  PID:5896
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7852,i,11880322327176291459,7079894821592823953,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=7000 /prefetch:8
                                  6⤵
                                    PID:5948
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5756,i,10352370013542641902,10831963569579631739,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=8784 /prefetch:8
                                    6⤵
                                    • Enumerates system info in registry
                                    PID:6676
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8560,i,707608482384798095,18398842989246657078,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=8612 /prefetch:8
                                    6⤵
                                    • Enumerates system info in registry
                                    PID:7552
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=9640,i,1409785541217196145,8919000985943760321,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=8936 /prefetch:2
                                    6⤵
                                    • Checks computer location settings
                                    • Enumerates system info in registry
                                    PID:6428
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8356,i,1395428412967246820,4021361827809008984,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=9336 /prefetch:8
                                    6⤵
                                    • Enumerates system info in registry
                                    PID:6664
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7780,i,1636528444033382314,3043179418520881010,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=7768 /prefetch:8
                                    6⤵
                                    • Enumerates system info in registry
                                    PID:7564
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8160,i,17406126674989904856,2367941618871460191,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=8148 /prefetch:8
                                    6⤵
                                    • Enumerates system info in registry
                                    PID:5484
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=9656,i,16842302743076965375,7798493060091184963,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=7860 /prefetch:8
                                    6⤵
                                    • Enumerates system info in registry
                                    PID:5408
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8340,i,11230992593550373449,3233862149356465433,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=8332 /prefetch:8
                                    6⤵
                                      PID:7484
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7516,i,16203597835677452673,2493980414476713865,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=7492 /prefetch:8
                                      6⤵
                                      • Enumerates system info in registry
                                      PID:968
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=11060,i,17448478809365842693,18427416486054643258,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=11072 /prefetch:8
                                      6⤵
                                      • Enumerates system info in registry
                                      PID:5992
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=11216,i,13815799740825290606,8554189880450358256,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=11224 /prefetch:8
                                      6⤵
                                        PID:2696
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8476,i,3102377203267637417,6150967040314551128,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=8392 /prefetch:8
                                        6⤵
                                        • Enumerates system info in registry
                                        PID:5332
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=10476,i,17010170896478236510,12207552219577241116,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=10556 /prefetch:2
                                        6⤵
                                        • Checks computer location settings
                                        PID:5448
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3976,i,5313425158740575739,10049371388474363818,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=4040 /prefetch:8
                                        6⤵
                                          PID:8132
                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5800,i,2797875393099784,9584590767297790224,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=5792 /prefetch:8
                                          6⤵
                                            PID:8100
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3280,i,5499038648755220263,39123028554161587,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=5984 /prefetch:8
                                            6⤵
                                              PID:7912
                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7648,i,14350295635598834841,16193439724878382700,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=7628 /prefetch:8
                                              6⤵
                                              • Enumerates system info in registry
                                              PID:2448
                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7908,i,17165342537226181556,4624413165540561003,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=8036 /prefetch:8
                                              6⤵
                                                PID:8336
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=3448,i,17859139188792742257,7647398240031372207,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=3440 /prefetch:2
                                                6⤵
                                                • Checks computer location settings
                                                PID:8496
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=11508,i,5465129060842072443,17689883864695205562,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=11552 /prefetch:2
                                                6⤵
                                                • Checks computer location settings
                                                PID:8952
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=11456,i,5281282422022515182,17682420476773624990,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709056590010169 --mojo-platform-channel-handle=5964 /prefetch:2
                                                6⤵
                                                • Checks computer location settings
                                                PID:9092
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5452,i,16366011288016623117,7956109400807963135,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709057527052018 --mojo-platform-channel-handle=7704 /prefetch:8
                                                6⤵
                                                • Enumerates system info in registry
                                                PID:8512
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=11548,i,3155135850768219993,14021859066130014616,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709058464093867 --mojo-platform-channel-handle=3492 /prefetch:2
                                                6⤵
                                                • Checks computer location settings
                                                • Enumerates system info in registry
                                                PID:6292
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=3736,i,10132565223666802872,7164596327811997080,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709059401135716 --mojo-platform-channel-handle=9356 /prefetch:2
                                                6⤵
                                                • Checks computer location settings
                                                • Enumerates system info in registry
                                                PID:7264
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8888,i,14582107073747020864,17100458359407645779,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709060338177565 --mojo-platform-channel-handle=11364 /prefetch:8
                                                6⤵
                                                  PID:6896
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=4012,i,7904404779208404951,8991162755667528133,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709061275219414 --mojo-platform-channel-handle=11432 /prefetch:2
                                                  6⤵
                                                  • Checks computer location settings
                                                  PID:4852
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=6312,i,11295043652814905686,1906292267670852304,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709062212261263 --mojo-platform-channel-handle=10552 /prefetch:2
                                                  6⤵
                                                  • Checks computer location settings
                                                  • Enumerates system info in registry
                                                  PID:7596
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8952,i,12649796456106979085,1567166788886836448,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709063149303112 --mojo-platform-channel-handle=9360 /prefetch:8
                                                  6⤵
                                                    PID:8104
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAQgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=8888,i,3997440195980408217,16708203832012708041,262144 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709064086344961 --mojo-platform-channel-handle=5648 /prefetch:8
                                                    6⤵
                                                    • Enumerates system info in registry
                                                    • Suspicious behavior: EnumeratesProcesses
                                                    PID:9048
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=11288,i,15798013128163499103,4644471400850150699,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709065023386810 --mojo-platform-channel-handle=3664 /prefetch:2
                                                    6⤵
                                                    • Checks computer location settings
                                                    • Enumerates system info in registry
                                                    PID:3308
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=548,i,2180401715618598925,10361094326299931654,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709065960428659 --mojo-platform-channel-handle=11296 /prefetch:8
                                                    6⤵
                                                      PID:1796
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=6928,i,10454606260825474574,14663483239932513819,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709066897470508 --mojo-platform-channel-handle=3408 /prefetch:8
                                                      6⤵
                                                        PID:8520
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=6924,i,2006828431159879989,7675347201902604868,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709067834512357 --mojo-platform-channel-handle=11344 /prefetch:2
                                                        6⤵
                                                        • Checks computer location settings
                                                        • Enumerates system info in registry
                                                        PID:7124
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=6908,i,16211827212719782881,13631041021578034755,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709068771554206 --mojo-platform-channel-handle=3504 /prefetch:2
                                                        6⤵
                                                        • Checks computer location settings
                                                        • Enumerates system info in registry
                                                        PID:928
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5504,i,1389549366241814673,7176885528598742592,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709069708596055 --mojo-platform-channel-handle=7172 /prefetch:8
                                                        6⤵
                                                          PID:7848
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=11500,i,442590823750109896,2632393048597228662,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709070645637904 --mojo-platform-channel-handle=11492 /prefetch:2
                                                          6⤵
                                                          • Checks computer location settings
                                                          PID:8196
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7948,i,8056910994901266667,7988103083187292378,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709071582679753 --mojo-platform-channel-handle=6648 /prefetch:8
                                                          6⤵
                                                            PID:6404
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=7452,i,6931473966078685430,2471555865503250861,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709072519721602 --mojo-platform-channel-handle=9452 /prefetch:2
                                                            6⤵
                                                            • Checks computer location settings
                                                            • Enumerates system info in registry
                                                            PID:7984
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=6956,i,5378201085526977920,17915299009685158025,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709073456763451 --mojo-platform-channel-handle=5412 /prefetch:8
                                                            6⤵
                                                            • Enumerates system info in registry
                                                            PID:7972
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --metrics-shmem-handle=1284,i,4135290266884965576,17396705121213200266,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709074393805300 --mojo-platform-channel-handle=6904 /prefetch:2
                                                            6⤵
                                                            • Checks computer location settings
                                                            PID:4140
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3444,i,13441234233979027878,2426204641401118782,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709075330847149 --mojo-platform-channel-handle=3564 /prefetch:8
                                                            6⤵
                                                              PID:2216
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=532,i,18081991889229369003,16996199529330959186,524288 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709076267888998 --mojo-platform-channel-handle=1076 /prefetch:8
                                                              6⤵
                                                              • Enumerates system info in registry
                                                              PID:4496
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --metrics-shmem-handle=3272,i,12546879107903427111,10299494478009543264,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709077204930847 --mojo-platform-channel-handle=6748 /prefetch:2
                                                              6⤵
                                                              • Checks computer location settings
                                                              PID:8140
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --metrics-shmem-handle=8632,i,3057053622647595334,18395377517215212025,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709078141972696 --mojo-platform-channel-handle=5648 /prefetch:2
                                                              6⤵
                                                              • Checks computer location settings
                                                              PID:6868
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --metrics-shmem-handle=3504,i,15661948094386240459,1385803889796004212,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709079079014545 --mojo-platform-channel-handle=8836 /prefetch:2
                                                              6⤵
                                                              • Checks computer location settings
                                                              PID:8636
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --metrics-shmem-handle=11316,i,15495841705516038057,13639177821271363683,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709080016056394 --mojo-platform-channel-handle=8900 /prefetch:2
                                                              6⤵
                                                              • Checks computer location settings
                                                              PID:9088
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --version
                                                              6⤵
                                                              • Enumerates system info in registry
                                                              PID:4284
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x174,0x178,0x170,0x140,0x16c,0x7ffcd7375310,0x7ffcd7375320,0x7ffcd7375330
                                                                7⤵
                                                                  PID:8544
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --metrics-shmem-handle=3444,i,4869994674433991666,14836732888127414958,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709080953098243 --mojo-platform-channel-handle=11504 /prefetch:2
                                                                6⤵
                                                                • Checks computer location settings
                                                                • Enumerates system info in registry
                                                                PID:5040
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
                                                                6⤵
                                                                  PID:6684
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x27c,0x280,0x284,0x258,0x288,0x7ff74f0d38d0,0x7ff74f0d38dc,0x7ff74f0d38e8
                                                                    7⤵
                                                                      PID:7748
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=11316,i,15643170115149818857,15561674793097158549,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709081890140092 --mojo-platform-channel-handle=5616 /prefetch:2
                                                                    6⤵
                                                                    • Checks computer location settings
                                                                    PID:5448
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --metrics-shmem-handle=8964,i,6688388866177529655,1350820028969999167,2097152 --field-trial-handle=1860,i,8023669250648140310,4290086922451137764,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,2167618080111055063,285113380426856385,4 --trace-process-track-uuid=3190709082827181941 --mojo-platform-channel-handle=7344 /prefetch:2
                                                                    6⤵
                                                                    • Checks computer location settings
                                                                    PID:8412
                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\38746828-0f1b-4326-96ca-cdc8954ef98b Opera GX Installer Temp\opera_package_202608281349581\assistant\Opera_GX_assistant_134.0.5954.44_Setup.exe_sfx.exe
                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\38746828-0f1b-4326-96ca-cdc8954ef98b Opera GX Installer Temp\opera_package_202608281349581\assistant\Opera_GX_assistant_134.0.5954.44_Setup.exe_sfx.exe"
                                                              3⤵
                                                              • Executes dropped EXE
                                                              • System Location Discovery: System Language Discovery
                                                              PID:2524
                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\38746828-0f1b-4326-96ca-cdc8954ef98b Opera GX Installer Temp\opera_package_202608281349581\assistant\assistant_installer.exe
                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\38746828-0f1b-4326-96ca-cdc8954ef98b Opera GX Installer Temp\opera_package_202608281349581\assistant\assistant_installer.exe" --version
                                                              3⤵
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              • System Location Discovery: System Language Discovery
                                                              • Suspicious use of WriteProcessMemory
                                                              PID:2584
                                                              • C:\Users\Admin\AppData\Local\Temp\.opera\38746828-0f1b-4326-96ca-cdc8954ef98b Opera GX Installer Temp\opera_package_202608281349581\assistant\assistant_installer.exe
                                                                "C:\Users\Admin\AppData\Local\Temp\.opera\38746828-0f1b-4326-96ca-cdc8954ef98b Opera GX Installer Temp\opera_package_202608281349581\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0xeecb80,0xeecb8c,0xeecb98
                                                                4⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • System Location Discovery: System Language Discovery
                                                                PID:1176
                                                        • C:\Windows\system32\wbem\unsecapp.exe
                                                          C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                          1⤵
                                                            PID:5620
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart
                                                            1⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • Enumerates system info in registry
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:5752
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0xdc,0xc8,0xc4,0xe4,0xd0,0x7ffcd7375310,0x7ffcd7375320,0x7ffcd7375330
                                                              2⤵
                                                              • Executes dropped EXE
                                                              PID:5772
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
                                                            1⤵
                                                              PID:6932
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.67 --initial-client-data=0x274,0x278,0x27c,0x1ec,0x280,0x7ff74f0d38d0,0x7ff74f0d38dc,0x7ff74f0d38e8
                                                                2⤵
                                                                  PID:6956
                                                                • C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe
                                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe" --version
                                                                  2⤵
                                                                    PID:7916

                                                                Network

                                                                      MITRE ATT&CK Enterprise v16

                                                                      Reconnaissance

                                                                      Resource Development

                                                                      Initial Access

                                                                      Execution

                                                                      Persistence

                                                                      Boot or Logon Autostart Execution

                                                                      1
                                                                      T1547

                                                                      Registry Run Keys / Startup Folder

                                                                      1
                                                                      T1547.001

                                                                      Event Triggered Execution

                                                                      1
                                                                      T1546

                                                                      Component Object Model Hijacking

                                                                      1
                                                                      T1546.015

                                                                      Privilege Escalation

                                                                      Boot or Logon Autostart Execution

                                                                      1
                                                                      T1547

                                                                      Registry Run Keys / Startup Folder

                                                                      1
                                                                      T1547.001

                                                                      Event Triggered Execution

                                                                      1
                                                                      T1546

                                                                      Component Object Model Hijacking

                                                                      1
                                                                      T1546.015

                                                                      Defense Evasion

                                                                      Modify Registry

                                                                      3
                                                                      T1112

                                                                      Subvert Trust Controls

                                                                      1
                                                                      T1553

                                                                      Install Root Certificate

                                                                      1
                                                                      T1553.004

                                                                      Credential Access

                                                                      Credentials from Password Stores

                                                                      1
                                                                      T1555

                                                                      Credentials from Web Browsers

                                                                      1
                                                                      T1555.003

                                                                      Unsecured Credentials

                                                                      1
                                                                      T1552

                                                                      Credentials In Files

                                                                      1
                                                                      T1552.001

                                                                      Discovery

                                                                      Peripheral Device Discovery

                                                                      1
                                                                      T1120

                                                                      Query Registry

                                                                      6
                                                                      T1012

                                                                      System Information Discovery

                                                                      5
                                                                      T1082

                                                                      System Location Discovery

                                                                      1
                                                                      T1614

                                                                      System Language Discovery

                                                                      1
                                                                      T1614.001

                                                                      System Time Discovery

                                                                      1
                                                                      T1124

                                                                      Lateral Movement

                                                                      Collection

                                                                      Data from Local System

                                                                      1
                                                                      T1005

                                                                      Command and Control

                                                                      Exfiltration

                                                                      Impact

                                                                      Replay Monitor

                                                                      Loading Replay Monitor...

                                                                      Downloads

                                                                      manifest.json
                                                                      • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping4956_1234160362\manifest.json
                                                                      • Size 1002B
                                                                      • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      manifest.json
                                                                      • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping4956_1720361720\manifest.json
                                                                      • Size 72B
                                                                      • SHA256 8541ddcefc17c421e19c9768a70c4772315795eac3268fd8820b0fb4f409720a
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      hyph-as.hyb
                                                                      • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping4956_312699872\hyph-as.hyb
                                                                      • Size 703B
                                                                      • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      hyph-hi.hyb
                                                                      • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping4956_312699872\hyph-hi.hyb
                                                                      • Size 687B
                                                                      • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      hyph-nb.hyb
                                                                      • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping4956_312699872\hyph-nb.hyb
                                                                      • Size 141KB
                                                                      • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      manifest.json
                                                                      • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping4956_312699872\manifest.json
                                                                      • Size 82B
                                                                      • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      manifest.json
                                                                      • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping4956_55311569\manifest.json
                                                                      • Size 73B
                                                                      • SHA256 d5a27c51bc6688a14bb66c1bd6499114ee6c894d848f181df30ad9ddb259ab1a
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      manifest.json
                                                                      • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping4956_735358303\manifest.json
                                                                      • Size 202B
                                                                      • SHA256 8bd59f33a6e286c7e7352dfaebc9b03cea4e0e959a8ebb2f04b69bd92e107dc1
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      manifest.json
                                                                      • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping4956_837388612\manifest.json
                                                                      • Size 94B
                                                                      • SHA256 95a2b0748baee70740ff2d5da78f98b5a29950562f989591f0b0b5bf13354b85
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      manifest.json
                                                                      • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping4956_896816076\manifest.json
                                                                      • Size 145B
                                                                      • SHA256 6cce5ad8d496bc5179fa84af8afc568eeba980d8a75058c6380b64fb42298c28
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      manifest.json
                                                                      • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping4956_927902610\manifest.json
                                                                      • Size 96B
                                                                      • SHA256 009bc184a3e16f164738ef2608c5d57671ed62124426028cc7ea7189e965e2dd
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      134.0.5954.67.manifest
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\134.0.5954.67.manifest
                                                                      • Size 225B
                                                                      • SHA256 0e1160adc59a574120ff7a87c060568a79408ae79ca837b71edc69bc210310d6
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      150x150Logo.scale-100.png
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\150x150Logo.scale-100.png
                                                                      • Size 2KB
                                                                      • SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      150x150Logo.scale-100_contrast-white.png
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\150x150Logo.scale-100_contrast-white.png
                                                                      • Size 1KB
                                                                      • SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      150x150Logo.scale-140.png
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\150x150Logo.scale-140.png
                                                                      • Size 3KB
                                                                      • SHA256 a36a13a5d5e3d39e3018ccc5f8859944c87256f8be24a3c08a6bf3cb06a26804
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      150x150Logo.scale-140_contrast-white.png
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\150x150Logo.scale-140_contrast-white.png
                                                                      • Size 2KB
                                                                      • SHA256 0bd63fe653885286e180fbdf6d1dadc66af242b8ed6bd1d03d8c5eccc20e91d7
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      150x150Logo.scale-180.png
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\150x150Logo.scale-180.png
                                                                      • Size 3KB
                                                                      • SHA256 6a8f64754c75edcc9abc1138e44acbd7064d7e8e2a28783939241dbd6afa30a5
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      150x150Logo.scale-180_contrast-white.png
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\150x150Logo.scale-180_contrast-white.png
                                                                      • Size 3KB
                                                                      • SHA256 a706b332e6a846357a86c30d0e8bb7697e7dd55c2ae592dd45611ddce0c0bf14
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      150x150Logo.scale-80.png
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\150x150Logo.scale-80.png
                                                                      • Size 1KB
                                                                      • SHA256 7e6b0d9ea7fda1b5ca7a0b01290521dff943da4cbf1498412ca7d749db42c32d
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      150x150Logo.scale-80_contrast-white.png
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\150x150Logo.scale-80_contrast-white.png
                                                                      • Size 1KB
                                                                      • SHA256 dfd1054f989cdee25f19ea792f363f042a125cab537a424f0224bbee13607e39
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      70x70Logo.scale-100.png
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\70x70Logo.scale-100.png
                                                                      • Size 1KB
                                                                      • SHA256 a333d7e4293f5269426b3fcb673a284f3708a66f957de62403b6570b24bae8f5
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      70x70Logo.scale-100_contrast-white.png
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\70x70Logo.scale-100_contrast-white.png
                                                                      • Size 1KB
                                                                      • SHA256 ebbe0b4761ea8968a0a3fafb383ac7ae175e98cd31a0f41bdf5fcb43469b58ec
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      70x70Logo.scale-140.png
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\70x70Logo.scale-140.png
                                                                      • Size 1KB
                                                                      • SHA256 207519f1c7b6c7509bfeb7b55724997eec6456c8baf55e882e72fc5cd43da221
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      70x70Logo.scale-140_contrast-white.png
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\70x70Logo.scale-140_contrast-white.png
                                                                      • Size 1KB
                                                                      • SHA256 464afaf960c32abdc2c3937a48bf14c5d1a819b017e719fded591d43a65d94c4
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      70x70Logo.scale-180.png
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\70x70Logo.scale-180.png
                                                                      • Size 2KB
                                                                      • SHA256 d6367dbc074e37f3488c26b0bad229bfe99f5c6bb0e28d37b41906c436152b57
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      70x70Logo.scale-180_contrast-white.png
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\70x70Logo.scale-180_contrast-white.png
                                                                      • Size 2KB
                                                                      • SHA256 5d46e4056f3915c279f1fa9edf61d93529fbcae5c59d616380ec5d9405b7763d
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      70x70Logo.scale-80.png
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\70x70Logo.scale-80.png
                                                                      • Size 1KB
                                                                      • SHA256 dc20e5aa2b500cd5b5c9f89647d3487810685c94268f22678e27820e2454bb3e
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      70x70Logo.scale-80_contrast-white.png
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\Assets\70x70Logo.scale-80_contrast-white.png
                                                                      • Size 901B
                                                                      • SHA256 dd6f46d32c3e235508f9e4c7d7f993bd807d955bca7e63cf3d57c6c4c102f46d
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      CChromaEditorLibrary64.dll
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\CChromaEditorLibrary64.dll
                                                                      • Size 145KB
                                                                      • SHA256 9659859fe84c596eeca0b0b8bef08069fc03d2e14b1902da797fe20050473da5
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      CUESDK.x64_2017.dll
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\CUESDK.x64_2017.dll
                                                                      • Size 474KB
                                                                      • SHA256 327404e34343f2c1cb29c5eba9c9e07c510d2205601aff9d11203fd47f3f278a
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      assistant_package
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\assistant_package
                                                                      • Size 3.6MB
                                                                      • SHA256 d0873c44de703e1139df7491c5f2b903c33d32cd8fc1a1a26ae63865a5c64307
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      d3dcompiler_47.dll
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\d3dcompiler_47.dll
                                                                      • Size 4.5MB
                                                                      • SHA256 4a40e73f7e25e0826d5ca489dd7381f24cbd09c90437cf3b406f1c585638d117
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      dxcompiler.dll
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\dxcompiler.dll
                                                                      • Size 24.5MB
                                                                      • SHA256 975bf8b48f4bd1a38529da6941045bfda4d461dc097a26a02f73e95f2c26fa2c
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      dxil.dll
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\dxil.dll
                                                                      • Size 1.5MB
                                                                      • SHA256 3581fc1eb0d7952c247a245c444c20d97048a3d59da730418b937820161c70a4
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      files_list
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\files_list
                                                                      • Size 4KB
                                                                      • SHA256 710b2c6f411e5baeabde2a72de98918a5530d284fbb49588a79790dafbcca671
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      headless_command_resources.pak
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\headless_command_resources.pak
                                                                      • Size 2KB
                                                                      • SHA256 8c0af48079123a1ed6f03f0d830527b21cd224c2fc7575ec485c486da41b16c9
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      icudtl.dat
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\icudtl.dat
                                                                      • Size 10.4MB
                                                                      • SHA256 d0a05dcc74a5b6ce1657a2ae44a58c0df03a1a07c24a4df2e3381353911382fc
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      installer.exe
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\installer.exe
                                                                      • Size 9.1MB
                                                                      • SHA256 4a2f8a2712b23ef4eb33beea0f223e760c077d412b7483c4d89dd8ce37d5609a
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      installer_helper_64.exe
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\installer_helper_64.exe
                                                                      • Size 593KB
                                                                      • SHA256 4ad10b99f938369c81c015b1872e7362f6bdbb076a9a51ae869db4556169bb8d
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      libEGL.dll
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\libEGL.dll
                                                                      • Size 491KB
                                                                      • SHA256 dabcc3ce40d499e3b7c656e53505226297e4c727985b3e6e654b2d8276368189
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      libGLESv2.dll
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\libGLESv2.dll
                                                                      • Size 7.5MB
                                                                      • SHA256 3b10d232b5f6b3251cf9842549db45ee17855da5d00b2360635ef2aa6fc5b2f0
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      bg.pak
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\localization\bg.pak
                                                                      • Size 1021KB
                                                                      • SHA256 64285bb6ebf93a1e30b2078df8b45ad1003941f9d561a6f928fda9b60f1eae21
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      bn.pak
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\localization\bn.pak
                                                                      • Size 1.3MB
                                                                      • SHA256 5366369fa1606dfa73818f271b40ff15050826f6d32e182894c08dfe90482384
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      ca.pak
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\localization\ca.pak
                                                                      • Size 643KB
                                                                      • SHA256 43ae93bcc6a1c9c4b74c0f1394ec981137fb2ba2445a053c3fc30081ae2d5449
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      cs.pak
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\localization\cs.pak
                                                                      • Size 641KB
                                                                      • SHA256 fcb05f5da9c4ba80302b2677fa33bfbcfb1202e710066b9b7309363e98d663eb
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      da.pak
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\localization\da.pak
                                                                      • Size 590KB
                                                                      • SHA256 1f893abd508c1bd0bbf04bec331783a163fb090746faa2f42ca4461368e9c148
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      de.pak
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\localization\de.pak
                                                                      • Size 639KB
                                                                      • SHA256 390c89eb1269fdc1b39b4db3c2bff3289ae513a1322616e31d69bab9ff210775
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      el.pak
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\localization\el.pak
                                                                      • Size 1.1MB
                                                                      • SHA256 5682ec60b420e368f96aae8dbd619dfb98ba68a201a383d833deb8a9247ceb3c
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      en-GB.pak
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\localization\en-GB.pak
                                                                      • Size 519KB
                                                                      • SHA256 14fed056a75238e738484cecbfbef99fb0acbf8aa3435a220ab8ab1fd8420fd1
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      en-US.pak
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\localization\en-US.pak
                                                                      • Size 522KB
                                                                      • SHA256 1e0d8ce860ca987b8a44782167a774c37282f6b6b60fdbaefe1e7afe5ad45367
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      es-419.pak
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\localization\es-419.pak
                                                                      • Size 631KB
                                                                      • SHA256 194735b11d20bf82817ad7cc6f694ceddb4ffc91ce842e66ba530c19192b2ca8
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      es.pak
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\localization\es.pak
                                                                      • Size 625KB
                                                                      • SHA256 5b5d2343d717362b79507dc65dd708b992c491dcee31627c9239f72120dd36c8
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      custom_partner_content.json
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.67\resources\custom_partner_content.json
                                                                      • Size 245KB
                                                                      • SHA256 84bc1efb211c6b45f2906278a36f1414922f994a9611bbee7713ffd4ae21e967
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      browser_assistant.exe
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                      • Size 5.3MB
                                                                      • SHA256 da8bbacee7fca0b223a7c8c7626c21d33843899019143af3211537c1791a1e5b
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      opera_autoupdate.exe
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                      • Size 7.4MB
                                                                      • SHA256 f368f5298da16c55d25637c15cd68b0806bd19564a460611a1894ece70994efe
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      installer_prefs.json
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json
                                                                      • Size 2KB
                                                                      • SHA256 c5a73b18cd3b777e07647c4cdc1f56421dcb7d23d0243c7f8560590f4eac48c4
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      opera.exe
                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      • Size 2.9MB
                                                                      • SHA256 07419e4de7dbcd54e137e00a1d1f2fb7cc7036dbda59d585f867535b1034b9aa
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      Opera GX Browser.lnk
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\38746828-0f1b-4326-96ca-cdc8954ef98b Opera GX Installer Temp\opera_package_202608281349581\Opera GX Browser.lnk
                                                                      • Size 1KB
                                                                      • SHA256 d01ab6ff7382aeb3daf30e820143a68e6507e9a80199708b760469ce82a0ad3f
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      additional_file0.tmp
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\38746828-0f1b-4326-96ca-cdc8954ef98b Opera GX Installer Temp\opera_package_202608281349581\additional_file0.tmp
                                                                      • Size 2.8MB
                                                                      • SHA256 70f1b1cbe5162fd8842c441779ef4d59de6b182d1448fc6285c6a73ae3033fc4
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      assistant_installer.exe
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\38746828-0f1b-4326-96ca-cdc8954ef98b Opera GX Installer Temp\opera_package_202608281349581\assistant\assistant_installer.exe
                                                                      • Size 2.4MB
                                                                      • SHA256 c5eef147beda944c8bff63591165b4c49e556d2c45c6ea9b9f1d9e16f180621e
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      dbgcore.DLL
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\38746828-0f1b-4326-96ca-cdc8954ef98b Opera GX Installer Temp\opera_package_202608281349581\assistant\dbgcore.DLL
                                                                      • Size 196KB
                                                                      • SHA256 856a7e6aacf1934324f08dc42b4b37cb20886d933cc0c57283c8425f9ebedbdd
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      dbghelp.dll
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\38746828-0f1b-4326-96ca-cdc8954ef98b Opera GX Installer Temp\opera_package_202608281349581\assistant\dbghelp.dll
                                                                      • Size 1.8MB
                                                                      • SHA256 8f880333398382fea1efa73751f4b16d8204a60cc13aefc8c4223b8086eccd81
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      installer_prefs_include.json
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\38746828-0f1b-4326-96ca-cdc8954ef98b Opera GX Installer Temp\opera_package_202608281349581\installer_prefs_include.json
                                                                      • Size 834B
                                                                      • SHA256 21a3b9b7bd9d7184d81152df6abe134a069666957caee437fa226149e59ed18a
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      installer_prefs_include.json
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\38746828-0f1b-4326-96ca-cdc8954ef98b Opera GX Installer Temp\opera_package_202608281349581\installer_prefs_include.json
                                                                      • Size 1KB
                                                                      • SHA256 dc5d7c0f07f1f1988528b9d8e967734284fff198d71c1b2c68bde7bf2c873788
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      installer_prefs_include.json.backup
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\38746828-0f1b-4326-96ca-cdc8954ef98b Opera GX Installer Temp\opera_package_202608281349581\installer_prefs_include.json.backup
                                                                      • Size 819B
                                                                      • SHA256 aa6125dd132631b4d4862c166a50078ece1ba9f1070577abacbb64c423aa1b21
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      installer.exe
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\7zS4D23C238\installer.exe
                                                                      • Size 9.1MB
                                                                      • SHA256 ce0afbd8f8cd1a36958b3d0bc8aa78e8c99c7861bab067a67821f77728be608d
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      1934111f-8b42-45b1-861e-1e2a1f97d02e.tmp
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1169826128\1934111f-8b42-45b1-861e-1e2a1f97d02e.tmp
                                                                      • Size 46KB
                                                                      • SHA256 0443bab24dce89bd68e06dba7f4335db89e70cf99ac92a0919d5df35a2c3cf93
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      manifest.json
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1412260845\CRX_INSTALL\manifest.json
                                                                      • Size 1KB
                                                                      • SHA256 260b3142cfc312fac94098f84da9343a08e2a4d2e8e08d0e0fd4688ea261f4f8
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      messages.json
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\_locales\de\messages.json
                                                                      • Size 428B
                                                                      • SHA256 e32c4c5ba04741c692aba1bc420b8a0f9ebddbec47a095b26626fb4ca299e9fd
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      messages.json
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\_locales\en\messages.json
                                                                      • Size 396B
                                                                      • SHA256 1bcb4888a65788a50ed88f4bd95955d1dafdc950b5ef4609b37f42934a4bf3b9
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      messages.json
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\_locales\en\messages.json
                                                                      • Size 429B
                                                                      • SHA256 c6a7161359e3c4fbc4059b7209c585f9aa2306c08e6c39a3003f4b29f2ceb22d
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      messages.json
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\_locales\es-mx\messages.json
                                                                      • Size 389B
                                                                      • SHA256 1a5875ab54054c7428fe3ff69f621d5a563a2a7e0b06c4023d734f916ff80891
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      messages.json
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\_locales\es\messages.json
                                                                      • Size 431B
                                                                      • SHA256 3efb81c6c075cb9477cde6823496bc4a83f4be1b3365541a76598522987065a3
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      messages.json
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\_locales\pl\messages.json
                                                                      • Size 434B
                                                                      • SHA256 a9bb777e5888034a9fe2f12c1e1d259f47e2f5f3f3df22e198733825b369b4ea
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      messages.json
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\_locales\pt-br\messages.json
                                                                      • Size 389B
                                                                      • SHA256 340966feb56d36c6564a964fbf8718c1f771d0abb40a8c3db95402f11e71a4e2
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      messages.json
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\_locales\ru\messages.json
                                                                      • Size 496B
                                                                      • SHA256 7b548cf699eca1f64491af66d591a3032f1c101b5c9ece9991afd9e0bfbbbb9c
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      messages.json
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\_locales\uk\messages.json
                                                                      • Size 443B
                                                                      • SHA256 370df5d3f43ebb04a413cb095d49eec44067c7e53c62cc3721fe105b3ba829ca
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      background.js
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\background.js
                                                                      • Size 86KB
                                                                      • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      background.js.LICENSE.txt
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\background.js.LICENSE.txt
                                                                      • Size 385B
                                                                      • SHA256 c61563a5f5ee84a023c9275397e24c8b8a33eb1e52a9edaf7e8c98571c076c59
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      content.js
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\content.js
                                                                      • Size 2.1MB
                                                                      • SHA256 7accf3b5f8836c5f5df604922e8b61b7838a335762ddef742a5c6146eb964d15
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      content_getdify.js
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\content_getdify.js
                                                                      • Size 19KB
                                                                      • SHA256 49293e9a17426d3a9a88676c3d2e3be4cc363625b947617db8d48fb175d7a410
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      content_getdify.js.LICENSE.txt
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\content_getdify.js.LICENSE.txt
                                                                      • Size 149B
                                                                      • SHA256 cdf963ced7d25a0f98901a547647b4d6e2dbe0197fd78c87a059a87b0e542fe2
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      Icon_Dark_Active.png
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\icons\128\Icon_Dark_Active.png
                                                                      • Size 2KB
                                                                      • SHA256 97d9553a4f725354a6d5c3eff11f31285fd89c3b150593f04785b83d0a56efc2
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      Icon_Dark_Available_Red.png
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\icons\128\Icon_Dark_Available_Red.png
                                                                      • Size 2KB
                                                                      • SHA256 9eccebdbdb61efc0cbd8bccf3a5fedc6f9a1ebe5084b160783f90a56cd1efa7b
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      Icon_Dark_Available_Yellow.png
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\icons\128\Icon_Dark_Available_Yellow.png
                                                                      • Size 2KB
                                                                      • SHA256 c165ef60bf3806cd0a7121a8d6cfd06909fc84b38a07d43e809bd7bff564099c
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      Icon_Dark_Neutral.png
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\icons\128\Icon_Dark_Neutral.png
                                                                      • Size 2KB
                                                                      • SHA256 8acb2d44490a29c14bea94c1ca4442c4b89150f8c8bc7af090c32ce136ca4bf1
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      Icon_Light_Neutral.png
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                      • Size 2KB
                                                                      • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      Icon_Dark_Active.png
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\icons\32\Icon_Dark_Active.png
                                                                      • Size 883B
                                                                      • SHA256 50aa1dcfa9083b57dd6187752b2c149294210be12d263b793d27daf8d431954c
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      Icon_Dark_Available_Red.png
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\icons\32\Icon_Dark_Available_Red.png
                                                                      • Size 895B
                                                                      • SHA256 2278e95b28851ade57217ab5c7b32598c44e1085693a3e26379643d29fa0a6d1
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      Icon_Dark_Available_Yellow.png
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\icons\32\Icon_Dark_Available_Yellow.png
                                                                      • Size 895B
                                                                      • SHA256 726a50a9c008449ab7bafbf21325bfc72093b7ae6a56c5be90cf8c32a8a44641
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      Icon_Dark_Neutral.png
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\icons\32\Icon_Dark_Neutral.png
                                                                      • Size 849B
                                                                      • SHA256 52dba611cdee4791ac34f18e0e0af3235355c805401e9c598225c16ed8c5536a
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      Icon_Light_Neutral.png
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
                                                                      • Size 962B
                                                                      • SHA256 e8adb8a9dcca121a1853749ebef122b84a995ebf8775cd27b0dd54bab9840bd1
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      Icon_Light_Neutral.png
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
                                                                      • Size 932B
                                                                      • SHA256 b8e92f9e9b9dc82799231b8d1b57091a9d0bcdd9b54615f86e8c4e4e5c9f036b
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      index.html
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\index.html
                                                                      • Size 222B
                                                                      • SHA256 fd21c7ca4637b0221250a14b9fcfb6ebc3b734e659ad80151be4bc579db818f1
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      manifest.json
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\manifest.json
                                                                      • Size 1KB
                                                                      • SHA256 4dc8cf07548e8abda9ccaed742ce955a4cce2b524abf4a2a73a5411c22aa567c
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      popup.js
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\popup.js
                                                                      • Size 1.7MB
                                                                      • SHA256 0d3ae5bbbc4a2dc9be874d725232628817cedef0bb6cc1a673d5fcddc1d77b53
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      popup.js.LICENSE.txt
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\popup.js.LICENSE.txt
                                                                      • Size 1KB
                                                                      • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      rules.json
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\rules.json
                                                                      • Size 839B
                                                                      • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      window.html
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\window.html
                                                                      • Size 223B
                                                                      • SHA256 48ead89755412349d4d261b8fd347282e52c1cdbffce846fa674d28a58ba3c35
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      window.js
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1804620799\CRX_INSTALL\window.js
                                                                      • Size 2.0MB
                                                                      • SHA256 79f8215d03832cf14283a73901e5419dd3a4442259282f4619bf82883c0e71ef
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      19bd380d-5038-4d89-aaf0-7ec52ee02d19.tmp
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1953826389\19bd380d-5038-4d89-aaf0-7ec52ee02d19.tmp
                                                                      • Size 2.6MB
                                                                      • SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      Icon_Light_Neutral.png
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1953826389\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                      • Size 2KB
                                                                      • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      42959b73-193d-4144-878d-b466a74d692c.tmp
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1962008484\42959b73-193d-4144-878d-b466a74d692c.tmp
                                                                      • Size 4.5MB
                                                                      • SHA256 a0adcf75c407790bffcac773e97ec98c4ae15791cae3f906d03d1907aaf672ff
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      favicon_opera_one.png
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_1962008484\CRX_INSTALL\favicon_opera_one.png
                                                                      • Size 2KB
                                                                      • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      e3777b55-3720-44b2-be71-d3ec421c0fc1.tmp
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_2141144884\e3777b55-3720-44b2-be71-d3ec421c0fc1.tmp
                                                                      • Size 472KB
                                                                      • SHA256 4b9b79291aca9c45d54ae238655f41b7a0eecb0b80fb3d172cd0b1d75e712540
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      icon-57.png
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_355445738\CRX_INSTALL\icons\icon-57.png
                                                                      • Size 873B
                                                                      • SHA256 8462b976325b85e3fe1140685159792a700d5382f2307d5eb667af10e76d8964
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      d65da84b-d392-4c47-bc3c-beef045df370.tmp
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_355445738\d65da84b-d392-4c47-bc3c-beef045df370.tmp
                                                                      • Size 1.2MB
                                                                      • SHA256 3db075e9f1b9a356bdd15c2aa205cac841db963d40b2c8ac834d9d659398bdc9
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      049a13db-f0f3-4529-9e34-082d7913309d.tmp
                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4956_960998969\049a13db-f0f3-4529-9e34-082d7913309d.tmp
                                                                      • Size 13KB
                                                                      • SHA256 35d78e805a910aad7462893e050376f9d18dbc73c592b4742e6ada87eff3f06b
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      3a3970c93fb72999.customDestinations-ms
                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3a3970c93fb72999.customDestinations-ms
                                                                      • Size 22KB
                                                                      • SHA256 1a925e4551d2ba1b3139097f724d1cf3bd6918134f779cb4dcdaaa36690b1728
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      3a3970c93fb72999.customDestinations-ms~RFe59b675.TMP
                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3a3970c93fb72999.customDestinations-ms~RFe59b675.TMP
                                                                      • Size 22KB
                                                                      • SHA256 05f838024efcaba1bc6ac0fd79fdd59db87f41af477ff7c3f05b8cb09031dd8e
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      heuristic_regexes.binarypb
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\AmountExtractionHeuristicRegexes\4\heuristic_regexes.binarypb
                                                                      • Size 633B
                                                                      • SHA256 a10f65d7e0d56702d6f08850c8bee9bd51af17f4be051900ff2b88c9217e425f
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      crl-set
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\CertificateRevocation\10740\crl-set
                                                                      • Size 1.4MB
                                                                      • SHA256 efe062a880f5bf64f0183dfdb4638a5e8b59307bafb45b8ddec52895c2eb4907
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      settings.dat
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                                                      • Size 40B
                                                                      • SHA256 95ced5f7d8e50420ecd7492ce53d22e21742c2f2b94e846effa7ffe262a05f5d
                                                                      • MD5 SHA1 SHA512
                                                                      Submit Download

                                                                      62ce88f3-28b4-44d0-8eea-6ce24ec94588.tmp
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\62ce88f3-28b4-44d0-8eea-6ce24ec94588.tmp
                                                                      • Size 162KB
                                                                      • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      73b5a2a2-3a1c-45e1-91bc-39b32166530e.tmp
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\73b5a2a2-3a1c-45e1-91bc-39b32166530e.tmp
                                                                      • Size 412B
                                                                      • SHA256 9bd08fc453f73199521b1732d160cfef72d5ef1a95fa35e1f7bf8e5a4746ef67
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      9b0627ce-e161-47f4-85ea-0d14db184694.tmp
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\9b0627ce-e161-47f4-85ea-0d14db184694.tmp
                                                                      • Size 12KB
                                                                      • SHA256 cf3866b58d637818d9ccadb64b1b255570b8fc6433a9a96355a61dbc6d3fc59a
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      the-real-index
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                      • Size 48B
                                                                      • SHA256 1fe04edb799b984bbb59049e066afbb2127a0a10d4e8474416e02f8e524f8b1a
                                                                      • MD5 SHA1 SHA512
                                                                      Submit Download

                                                                      the-real-index
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                      • Size 2KB
                                                                      • SHA256 09499f6d637b7fff962b69890b4be72074e1fb8ccdd8992d86e40b606c3ac9e0
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      MANIFEST-000001
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\MANIFEST-000001
                                                                      • Size 41B
                                                                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                      • MD5 SHA1 SHA512
                                                                      Submit Download

                                                                      _ruleset1
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\Temp\scoped_dir4956_416800638\CRX_INSTALL\_metadata\generated_indexed_rulesets\_ruleset1
                                                                      • Size 987B
                                                                      • SHA256 87e9f607b1b2638272f2d825615e33512be1eb9ca28e257950f071ca55772e26
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      messages.json
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\_locales\en\messages.json
                                                                      • Size 2KB
                                                                      • SHA256 57e2b257a65fa5e980c619214ed9ae25580bbd581143e28abac49928b31977a6
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      background.js
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\background.js
                                                                      • Size 17KB
                                                                      • SHA256 c7a162a7650887dffe12034ddbba5ddb91ca5bf4f5478f59ded324f7e088bacb
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      twitch16.png
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch16.png
                                                                      • Size 370B
                                                                      • SHA256 6534efc770a8a32c881258029c2f2b9d9f1b75228f53bf9b4cd2b9a9689884e0
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      twitch48.png
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch48.png
                                                                      • Size 921B
                                                                      • SHA256 47e37c0726206401cc69cb6ab0fdda79b364356a5e2fdbd5ce479bfbb965f245
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      main.js
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.7_0\main.js
                                                                      • Size 46KB
                                                                      • SHA256 e1b3123f37dfe988a8a22427e98d06cdf472c23429f6277f68c6eeb1626cd54e
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      computed_hashes.json
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.7_1\_metadata\computed_hashes.json
                                                                      • Size 647B
                                                                      • SHA256 bf09770974c4a70c9d2a0c3436520be7d137cd5bef24c6a5e4615e3ccbe81c1f
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      verified_contents.json
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.7_1\_metadata\verified_contents.json
                                                                      • Size 1KB
                                                                      • SHA256 24ac3b2149b8849f2c86095139e74797dcc2038b2cdddb58fb57a50f44d6232a
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      background.js
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\1.2.332_0\background.js
                                                                      • Size 365KB
                                                                      • SHA256 5acb8f0a54c6774e0832d8ee9c7fac2dd593b1a74c89c5f4a9ba3f12d878ebcf
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      icon-57.png
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\1.2.332_0\icons\icon-57.png
                                                                      • Size 863B
                                                                      • SHA256 7a1ae78e7cb77b74cbaefa5b92ec32384761499375738898e71bd43f018f3a17
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      logo_128.png
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_128.png
                                                                      • Size 7KB
                                                                      • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      logo_16.png
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_16.png
                                                                      • Size 653B
                                                                      • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      logo_32.png
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_32.png
                                                                      • Size 1KB
                                                                      • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      logo_48.png
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_48.png
                                                                      • Size 2KB
                                                                      • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      logo_64.png
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_64.png
                                                                      • Size 2KB
                                                                      • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      service-worker-loader.js
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\service-worker-loader.js
                                                                      • Size 49B
                                                                      • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                                      • MD5 SHA1 SHA512
                                                                      Submit Download

                                                                      favicon_opera_one.png
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\favicon_opera_one.png
                                                                      • Size 2KB
                                                                      • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      reader_mode.js
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\reader_mode.js
                                                                      • Size 112KB
                                                                      • SHA256 dd4d3dfbd760159952c05355fdc4bc738488fe02e0e8dc43704e2095b6c76c1e
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      service_worker.js
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\service_worker.js
                                                                      • Size 89KB
                                                                      • SHA256 54a79133f29c7d1da2b6cbd5934a8fa8a60bdcfef8c23e449cd04e0ccd2cbf27
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      spotify_frame_interceptor.js
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\spotify_frame_interceptor.js
                                                                      • Size 5KB
                                                                      • SHA256 442264acc3e319d41ee98a0df10538500eb7914b0be345689340c83cfec1be7d
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      computed_hashes.json
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_1\_metadata\computed_hashes.json
                                                                      • Size 73KB
                                                                      • SHA256 6981ab0e6f2328f8b6f583cee4b68ca6cb8359e800387774dac97df21043e0c4
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      verified_contents.json
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_1\_metadata\verified_contents.json
                                                                      • Size 6KB
                                                                      • SHA256 7962ed372049509eb040645a6a96d37c60414647f7d7c6852d20e183d8fca45d
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      MANIFEST-000001
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\https_gxcorner.games_0.indexeddb.leveldb\MANIFEST-000001
                                                                      • Size 23B
                                                                      • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                      • MD5 SHA1 SHA512
                                                                      Submit Download

                                                                      12a794d3-3945-449b-92d7-4819b3f747ca.tmp
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\12a794d3-3945-449b-92d7-4819b3f747ca.tmp
                                                                      • Size 27KB
                                                                      • SHA256 353f070543d1c43247d565c23d4c0346a8d65d902aa7bae04c6ae5e64bc5cde7
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      a6983662-3a3b-41c3-a2c5-c13b38f54a2a.tmp
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\a6983662-3a3b-41c3-a2c5-c13b38f54a2a.tmp
                                                                      • Size 27KB
                                                                      • SHA256 b79b047aa13202f575c92b513e67530ee9a5de4755d8d67c85c2f156c9a4eb39
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      e520aca0-65e2-4709-bb2e-3e17070b12b8.tmp
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\e520aca0-65e2-4709-bb2e-3e17070b12b8.tmp
                                                                      • Size 27KB
                                                                      • SHA256 2f1a860dec73e59307d1a8e1b1ace276076ef77008f468720569bfc8d7ba2512
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      e9165a1c-8405-4f8e-b64e-7d21461763f0.tmp
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\e9165a1c-8405-4f8e-b64e-7d21461763f0.tmp
                                                                      • Size 27KB
                                                                      • SHA256 cc914b6c8be70f233d533244b1fe41e32c495b9bb57901a96777f7d19fd75dfa
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      fbcef1a1-2d88-4b54-ab29-810c5cb97918.tmp
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\fbcef1a1-2d88-4b54-ab29-810c5cb97918.tmp
                                                                      • Size 27KB
                                                                      • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      Network Persistent State
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State
                                                                      • Size 4KB
                                                                      • SHA256 721d3c21a3dd3006481cb7d80ef4a65fbbde74cb69bf31c5d0515ca4116d1a20
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      d08514f4-df29-4d6d-b76e-3f53d6f1a0a9.tmp
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\d08514f4-df29-4d6d-b76e-3f53d6f1a0a9.tmp
                                                                      • Size 59B
                                                                      • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      Preferences
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                      • Size 12KB
                                                                      • SHA256 f7a0a88fbb22443468f94d91a5ece82edbdd882f0623bfb6601af7324fe530e6
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      Preferences
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                      • Size 13KB
                                                                      • SHA256 b0ed844eb86f3466b887197efb15fd87bf7c36a38e6e869c7d8ced22cc7cf468
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      Preferences
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                      • Size 13KB
                                                                      • SHA256 dfa81eba9d57f8c51c5fb79319d161eb606840c9c133f9be18b970d6a275630f
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      Secure Preferences
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
                                                                      • Size 127KB
                                                                      • SHA256 398722f0bc55f116071adc6de74081c69db2ac8b636e983a6b5bce2f17ee95cd
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      45c2f2fcb9072b47_0
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\45c2f2fcb9072b47_0
                                                                      • Size 46KB
                                                                      • SHA256 8f5c932c50f23b5576cb5e9f1c759ad3f7a0323d46a2ffb575b6b44928cfdacd
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      45c2f2fcb9072b47_1
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\45c2f2fcb9072b47_1
                                                                      • Size 110KB
                                                                      • SHA256 b0a6448942c031c468e966449b639181cbc2aaa330374886e602e355b5c3c99e
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      3c74e634-ed24-46bc-a3f9-017600b02d46.tmp
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\3c74e634-ed24-46bc-a3f9-017600b02d46.tmp
                                                                      • Size 72B
                                                                      • SHA256 d440cdf3fc89f0a46d57c3f3ab091d217f17c169b3fac542d9d67882ae368b9e
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      the-real-index
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                      • Size 552B
                                                                      • SHA256 ab40bfd61405de01b08ac4c7734ec6bbe1633ec1b592c7d3ce9995922c4bab73
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      the-real-index
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                      • Size 552B
                                                                      • SHA256 404d1d13b1b83811e7bda50cf7daaf40da90e10ffabe8ca3d8a72b9ce8d53bda
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      71b69c12-79cb-4b9c-a708-344af3498243.tmp
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\71b69c12-79cb-4b9c-a708-344af3498243.tmp
                                                                      • Size 973B
                                                                      • SHA256 d5324cd244ee9c743841b8aa25461e129abaf3c156739c6041a6852b2d63d6a1
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      98e6e04d-1a31-45b1-a95b-b0e653abf269.tmp
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\98e6e04d-1a31-45b1-a95b-b0e653abf269.tmp
                                                                      • Size 429B
                                                                      • SHA256 3cbc5926a200bda4378097fc4a1a24b3fe6768e6e9bea6c7af70fe4c76e7199c
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 12KB
                                                                      • SHA256 2ef4be90be2d10668986befc48722b2617b1228b1e149fecafc9aceb9555778d
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 541B
                                                                      • SHA256 154327ecc7e60f68e52c5668f9f1adc176b37fdbeb19c18623d83443e96044e5
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 669B
                                                                      • SHA256 8c8127f32013b1a2a85be4004cfde6a2102a16fdd4d88860eaf227ad19477d67
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 10KB
                                                                      • SHA256 11a1fa5a932104e3ef108add0240a7fd95027ec0370a8b3cce107d471b8bb89b
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 11KB
                                                                      • SHA256 35a213925ab3732b52383f60ebcf8e4bb19a5045fb7e2e65b0c4fb1d6609456c
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 12KB
                                                                      • SHA256 956b452b8daac1ff76aa65619cd8fb1bc421b5bf8ea1fa391c3041bdbb6aed98
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 12KB
                                                                      • SHA256 2afcbb63c8767ac952f575dd318245c8d478a906792f8ac1ed5e1bef91559ce0
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 13KB
                                                                      • SHA256 514df436f9366c5af6ef3ec70865ea1ee70397c0f0250211277f5995c8980147
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 13KB
                                                                      • SHA256 6e42057563b6f9fcccec1801f6d99a4335158834f1c2dc574dc2c84e4f348edd
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 13KB
                                                                      • SHA256 9a5dfd48ca428a5448e92540b4f8477f1de3e51f19795337e89b90c034b8b959
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 13KB
                                                                      • SHA256 821df3bdcc5ecc39324d1d1b6e96b5e857fd35da44094370f9e092fe509d765d
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 1KB
                                                                      • SHA256 d117318f4bc964256b8becb008cfbc885a5ebc2c2be951c1b13cf0fe62726532
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 797B
                                                                      • SHA256 4a5390f928dd3fea44afd7a62afbc34a531a920daca912de50c59ef0290fe90f
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 1KB
                                                                      • SHA256 a6dcdb5bfb701123d21c5ea649e2a52e2c1e3fefed3177111a1dfecc8e2681c7
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 1KB
                                                                      • SHA256 43698af798a67bdf3a487ee6459dcd085c66f46322258665755030841c444baa
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 1KB
                                                                      • SHA256 82914c503c898f4259f4f89d4b59336976cd47d67aafe87e7f5410bd96e39742
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 1KB
                                                                      • SHA256 83470527e31c20c7da7d40ebeb7842d20800d4620651b896f3ed9ec72690da1e
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 2KB
                                                                      • SHA256 4c7cc34be6b4e212ecbaefe0b0e9fa5641ba481ddd93fa0c820ee212e6aa8706
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 2KB
                                                                      • SHA256 ad19fe7f4ab1f3b979dbe2f3068b9b94bdb072b6e19849fb2ee55b7f9e2694a9
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 2KB
                                                                      • SHA256 eae2e6f7c2b9dcfaff4821c293d28e17341f6d8eb397fc505966560a3472c47b
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 2KB
                                                                      • SHA256 244b9258fd994fe3131f7b1092c52b9247b899529336bbe34cb4a1f54f5d8d16
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 2KB
                                                                      • SHA256 c89a557c18611671b2af3a8ffea6447481e7b80b59e9d4e3b23515d7afcd07e8
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 2KB
                                                                      • SHA256 bd18dd4508f1182d6dd611e07b1517f6676c1012c72f53e39724eba0017e1a8e
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 2KB
                                                                      • SHA256 9367f75bfd868ce9233a2671e4ee928f409b2a87412e9cba66cfa8c9f6d95c9a
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 2KB
                                                                      • SHA256 2942d6981762c98335c1e7a2c252f89f2a8fed9c1bdc41f57659fa27768fcb43
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 3KB
                                                                      • SHA256 70b0e0535577e3c2cc59d5ea10d66967b451fad01a347832ae2e70e91ee03f6d
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 3KB
                                                                      • SHA256 2e000eec599f4f2eb2cb3b93c024b80ea9e641af69057b12f5aedb10f01a53ad
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 3KB
                                                                      • SHA256 3f1e7e0fe7d535d8f23a986843a6daba4de413d4b412fa6b5f7ec17c2e6b07cf
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 3KB
                                                                      • SHA256 16cf4b418e75a103d55ff81e5cdb8a94808749a97c5316fd77acf2b9519b0f67
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 3KB
                                                                      • SHA256 ccb0d669deeb2012f8e58b9447e68841f4c77190c45da19b8901a491dde23ecb
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 8KB
                                                                      • SHA256 705dd9cd646417768bc7b1411b96c8aaccaec396a66cdd64773035df308d20dc
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 10KB
                                                                      • SHA256 3b1113c11ed007bfa3881fc26cf4d788f72a2af94e9d78e97e24845b177f4d23
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 10KB
                                                                      • SHA256 67b9d6fec4ed8dde3b079fb83958b0ac3e845fb38e273d993a5eb9664d96bb78
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 10KB
                                                                      • SHA256 b7938b74b61dc9cb6a589224e5d30730c739b5b5c6a9290d539e08cb7316c904
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 10KB
                                                                      • SHA256 aadd38599fb85678e7ecca3156fc090bfe3d933e64267a53742d960c1ac63fd9
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 10KB
                                                                      • SHA256 9c1f5dfb061e0931706c8a37bc6cc6b1712d6439fb55e135c3e40829901f072d
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 10KB
                                                                      • SHA256 1e3a86a2e3ec9b5eb1f3d144898adaec359396bbca53c0768446f42967929f9f
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 10KB
                                                                      • SHA256 b84b7ac0cdfe1ba3c13dbb23a2b3e94e1abfd75261b34d2bdfdf413eb9948f88
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 10KB
                                                                      • SHA256 79f1a48ff00455d3362588ffd8eb12061374349e6568a4b6ad91947e9ab62d7a
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 12KB
                                                                      • SHA256 ef1690774054018c9e63c26087ecea8b173622d36d72a6f5c6f01631db22b12c
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 9KB
                                                                      • SHA256 03babc750f9eae92801677575dd302587672b1f27484a51dca2f9cc22145cf43
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 1KB
                                                                      • SHA256 ca85418eccce6008f2aeb2150b50e1ac8a6989ece65cc13685854f3372912ea5
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 8KB
                                                                      • SHA256 662294ca8f6ca780b47510ad133a3728c13a61932107a56f1287c13345dd48fc
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 3KB
                                                                      • SHA256 d9a37097faaeef69585c339b33ecacaa789a1ab518c810992842be2fe1c8fb0c
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 12KB
                                                                      • SHA256 af201c2d4de93c846ea20f3bce7685223df1193ecec4f14d90f657ee19547321
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 12KB
                                                                      • SHA256 f93df3a6056020885fc140881560daa111a02731921e9c647d22975e545ed34d
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 12KB
                                                                      • SHA256 7570df7d5148af58b21d4e14c31d63ed0684a5b19be2dff73605b0210f5f9ba3
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 9KB
                                                                      • SHA256 767921ecc16d1e22452ea71c99878acfe0e2d3654be487eb56be7b32d074d3f5
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 9KB
                                                                      • SHA256 0f9c7496bdf7cf7b7448a0a459f3f42fea4f3d9bf786184139b631c5b7c339a3
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 9KB
                                                                      • SHA256 3cfa12a27c3ff8696fab9f65f0765ccbe36a0862dd493747c3d5adb415c72c78
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 9KB
                                                                      • SHA256 8852f696d122d940444fd07d6c8eaa1c190828861d050b62d27d9afef4d907dc
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 9KB
                                                                      • SHA256 64263baec6cb265048591896bd952e545b6fe3554d0a1df4b7c9ed5baa671599
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 9KB
                                                                      • SHA256 e44614ab3c2ecb990adb7cf34f63bfbe80a1a809e22892ce712e9fd5542d9b3c
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 9KB
                                                                      • SHA256 68e1ac2533a36778281356d3face1c8e28d92f8e5a44a855c9a7d6a7798d886c
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 9KB
                                                                      • SHA256 00f8bee80db94f354782d8a6e1129f37a52322a6db7fa04d89414a627713e69e
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 9KB
                                                                      • SHA256 425714823862e8dcc8e345a39a557c97ba31be5adc853f56baa5b198b275979e
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 9KB
                                                                      • SHA256 4376d5ae935c549f0762a365d9f201f8c60284f2f1259a20de32136ea9d17133
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 9KB
                                                                      • SHA256 38530d83a9a71985393493ef3c87eca2e07f55b48d6aad14fcb914cd0b966ff8
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 9KB
                                                                      • SHA256 2d1220bbb16fec09c701f9371235fb156b1413ca546646978a248708b4f5ba0c
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 9KB
                                                                      • SHA256 f54bf236ef26ac90d6654afd29c97a60ecbd5b9343beaa9ad3f163459a66358c
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 10KB
                                                                      • SHA256 360bbb6e1846c0cf1341a996d97f75ccb77aa9238c8324ae3a05281e76536b0c
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 12KB
                                                                      • SHA256 8416cae70ffab5f0b075cd81c7124c2031a5840a422679f3c393deb5b0ce6709
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 12KB
                                                                      • SHA256 d43dddc3b051c84da7781247d429af12201f7d96f275c1b09c75ac9694ce2156
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 12KB
                                                                      • SHA256 d6dd20e648158e63288652d38963834c59efca78f4683004562535e17867eef4
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 12KB
                                                                      • SHA256 02ed2ebedb517967870cb23eb3fcf5e9b35820190ae4a2bd0eb865ba541f3002
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 9KB
                                                                      • SHA256 417c086e4898504b1fc7210ebaf5a2c126457f9b6a3862c46d56a71ea788f180
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 9KB
                                                                      • SHA256 660fed156e0c57721a924718d9fe7c7eb6422766361e3d23f47582429dc16a8a
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 10KB
                                                                      • SHA256 ac50a7ce531456be7dacd142c8617d51a1b86e2b70303307fb5735930712c577
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 9KB
                                                                      • SHA256 9a375a33691c51c5bfcd1d025abc6d84a47fe1afbc06653f74bb8922fbafe605
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 10KB
                                                                      • SHA256 73b30486867c4f1361d31744cef6a6735939b40b91d65cf264363533350db99f
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 10KB
                                                                      • SHA256 272e7c287f586de39b62cfbc0a5556ad6a7ae577476059aa0b1d455ea8240c5a
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 12KB
                                                                      • SHA256 b39a986fcf793b3eaaf93c164f0ea30defa7530c4cda15504908998b5661cba0
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 11KB
                                                                      • SHA256 e420394a23318686e87ebe4cfdf3856aa788148163c6e4fd30699ef3935430d7
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_822917bc-e1ad-4dc6-8a54-bece789f5094.raw
                                                                      • Size 13KB
                                                                      • SHA256 b2c1f9451dc8c38878a7fd125effbfadb0a7636727e2c2869f53834fc274c36c
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      CURRENT
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Sync Data\LevelDB\CURRENT
                                                                      • Size 16B
                                                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                      • MD5 SHA1 SHA512
                                                                      Submit Download

                                                                      b63abed3-9413-4d08-8e45-4cf7ad8da9f1.tmp
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\b63abed3-9413-4d08-8e45-4cf7ad8da9f1.tmp
                                                                      • Size 84KB
                                                                      • SHA256 3a674b50991607d2ab1a98190c9a7df864cd1727632f25e895b86a4bee2898df
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      ssdfp4956.0.421215390
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.0.421215390
                                                                      • Size 690B
                                                                      • SHA256 443fc1c4f3aab1af05ac39338c07f537b869d21177699ad17348612a8a820f33
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.0.421215390
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.0.421215390
                                                                      • Size 3KB
                                                                      • SHA256 17c90c8ac184fa8603f62a99adfadb914205569b25c5da02e30f7fad4178d6e8
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.0.421215390
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.0.421215390
                                                                      • Size 779B
                                                                      • SHA256 c73cad6fcfd5de9a7e41d19f021db6e1e197aaa0875d763af59a1946e77b5899
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.0.421215390
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.0.421215390
                                                                      • Size 3KB
                                                                      • SHA256 bd853301884148f9f7dd9d2bbc6f89c8cbd815372d4d2e71e28ea73c0337be74
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.0.421215390
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.0.421215390
                                                                      • Size 3KB
                                                                      • SHA256 46ec2f721b1eb91b2e35a07676795e83e8c1cd0f9aa6dc74e438ff84c804ed12
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.0.421215390
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.0.421215390
                                                                      • Size 3KB
                                                                      • SHA256 eec50af277505dfcb4b9fed11d413d42e54660a2455b7c63cccb6d75b4044c06
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.0.421215390
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.0.421215390
                                                                      • Size 3KB
                                                                      • SHA256 eb983287e3b18cf377b1db6caf429f7c60d2c56f5f0ceb18e84948356adc9fff
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.0.421215390
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.0.421215390
                                                                      • Size 3KB
                                                                      • SHA256 0686eb9da6d2946a889d8cac969a525646ab43a06cf07c09de51c93caea77d9a
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.0.421215390
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.0.421215390
                                                                      • Size 3KB
                                                                      • SHA256 ae3cc216897f6ac43e240fe1ef8050cc7fa16433d0d1d67c50d0dbdee0b0c382
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.0.421215390
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.0.421215390
                                                                      • Size 870B
                                                                      • SHA256 c49872d94e15cd5eda7a4c7af19ef9ee7202b81cb9effc06a7e947b46a44ed9b
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.0.421215390
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.0.421215390
                                                                      • Size 2KB
                                                                      • SHA256 a87c53354e435508dea3a45dc06e0efddfdb0fed26caedc5dd6e306520abf4f4
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.0.421215390
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.0.421215390
                                                                      • Size 505B
                                                                      • SHA256 58c1df36cc4c978a7c8374563b5a9e3cb5f472424295ab3e9641dd6b53f7577a
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.0.421215390
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.0.421215390
                                                                      • Size 963B
                                                                      • SHA256 18d58c1b974d3f75e359952a7f979d62d4492f0352f8be5186f1d7d3d00e447c
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.0.421215390
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.0.421215390
                                                                      • Size 1KB
                                                                      • SHA256 8563de4865a98f2c78a623a4f972e04f4d1afbc6144f603d2ff0b8fb8467e40d
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.0.421215390
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.0.421215390
                                                                      • Size 1KB
                                                                      • SHA256 7e29b1846d70d8a6a63fd41adce21258b73d292054a585e36d64265e583a943a
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.0.421215390
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.0.421215390
                                                                      • Size 1KB
                                                                      • SHA256 46dd5495652de8e592e0bffa8f69359e113cddbf233795bc7f580018d85872cb
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.0.421215390
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.0.421215390
                                                                      • Size 1KB
                                                                      • SHA256 5ad7a067be82d2c6d0f60e1ed148c69f18fa56df493f55647ca0f7cb543be313
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.0.421215390
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.0.421215390
                                                                      • Size 1KB
                                                                      • SHA256 0c15d32882f6fa639ead13bd86feca4ac7e118c14ed1dd713cf3748fcce530a4
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.0.421215390
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.0.421215390
                                                                      • Size 1KB
                                                                      • SHA256 1075aea1f7c12cb73aaaf8c4a5113336d6c1d74dcc78ccc8657c12e9c51addd0
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.0.421215390
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.0.421215390
                                                                      • Size 1KB
                                                                      • SHA256 717c153952d3dbf7b56de9e23e1b3584f900b019f1b0a647d6b4de05c7378e44
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.0.421215390
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.0.421215390
                                                                      • Size 597B
                                                                      • SHA256 29c0a2cad68f8ae82ea676d4450bd2676bc2671d1905e97b820539b0dd4b584b
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.0.421215390
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.0.421215390
                                                                      • Size 1KB
                                                                      • SHA256 c68e5d5852ae2b06950b77b2e3ca2925ccff767441b82714ac348c0d6517ed0b
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.0.421215390
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.0.421215390
                                                                      • Size 3KB
                                                                      • SHA256 6392193f312d6b0eb655051f32edc0e74844dcc9396f01425f000c0191f7813a
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.1.1143752166
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.1.1143752166
                                                                      • Size 224B
                                                                      • SHA256 f7e8619160b3d5206a8a0af458cba5d2bf64436b7b3c2d2b65201c08c5938879
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.1.1143752166
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.1.1143752166
                                                                      • Size 224B
                                                                      • SHA256 e306a20de6519515f76a2f2fadae04fa2306cef51c7dee7bd7ee1f5597db5c86
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.1.1143752166
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.1.1143752166
                                                                      • Size 224B
                                                                      • SHA256 a0738e73c8954876da37588af6a89b7ea5b31e1936c44ecc3dba04946b4729d0
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.1.1143752166
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.1.1143752166
                                                                      • Size 322B
                                                                      • SHA256 21f6d1eafcc434b7263fe8ac73cda15f00db66b876bf86c69ec3370681881b46
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.1.1143752166
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.1.1143752166
                                                                      • Size 200B
                                                                      • SHA256 df2ff1084b96440710f3fff511057b04cf0afe12bb0dfda22a7d24ca61fbfb50
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.1.1143752166
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.1.1143752166
                                                                      • Size 171B
                                                                      • SHA256 b6e6a289020a22dc0d15609bcee7fc1af0d5141dacfacb4050ac83adba180492
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      ssdfp4956.1.1143752166
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4956.1.1143752166
                                                                      • Size 322B
                                                                      • SHA256 f9c9ae41542d790131268ebba6c92833e8c43ae5d287dcd952f380a6582de0b9
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      data_0
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_0
                                                                      • Size 8KB
                                                                      • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                      Submit Download

                                                                      data_1
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_1
                                                                      • Size 264KB
                                                                      • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                      Submit Download

                                                                      data_2
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_2
                                                                      • Size 8KB
                                                                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                      Submit Download

                                                                      data_3
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_3
                                                                      • Size 8KB
                                                                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                      Submit Download

                                                                      Local State
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                      • Size 3KB
                                                                      • SHA256 4f2b94bbc3b7b485aeaf47cad303480485b9c4dfaf12df7c58729789bb919618
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      Local State
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                      • Size 4KB
                                                                      • SHA256 35c1620007455dcb48f1a68c66527300edc98ca46b98bbdb5a32cf32e3e5074d
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      Local State
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                      • Size 4KB
                                                                      • SHA256 a2a94396c34bd78408fbaa88b7be03fd844f9f8f2333688f7f9e1abc69d68af8
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      Local State
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                      • Size 4KB
                                                                      • SHA256 ad69c830e192f370ec3e5cff4621249512165ec6378b1da20b2396d7ba31195d
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      Local State
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                      • Size 4KB
                                                                      • SHA256 d884e862ac7c67860facb8c5233fa71cb6239b3057e8dfa21abc126653120c8a
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      Local State
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                      • Size 4KB
                                                                      • SHA256 d83b00e487bf7d218258640aa1501b18c56cd98c2f1613894a9d9878e0a6ec03
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      Local State
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                      • Size 4KB
                                                                      • SHA256 a73ac0907f20ebe4994d52e80298ebea19bfe7d9a6923b62e6f0d4b7be81035b
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      Local State
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                      • Size 4KB
                                                                      • SHA256 fa5560a8aafdabc8418fac47ceae9b7630c70ca608c91d044797bed4186168ea
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      Local State
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                      • Size 4KB
                                                                      • SHA256 fa8c84150bf5ab579c46a71d31d9588db30ef51e2b451bb171b666515f9dd028
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      Local State
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                      • Size 4KB
                                                                      • SHA256 f127af469f23f8ae0d8576c5edae14a4d75f283515cd93640347dd22312894f6
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      preloaded_data.pb
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\MEIPreload\1.1.0.3\preloaded_data.pb
                                                                      • Size 8KB
                                                                      • SHA256 9b32ba9222d44bebc479ffa9704d2a9abccae153982838a3b9a79846b80877a3
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      Google.Widevine.CDM.dll
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\MediaFoundationWidevineCdm\x64\1.0.2738.0\Google.Widevine.CDM.dll
                                                                      • Size 2.7MB
                                                                      • SHA256 cb190e7d1b002a3050705580dd51eba895a19eb09620bdd48d63085d5d88031e
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      verified_contents.json
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\MediaFoundationWidevineCdm\x64\1.0.2738.0\_metadata\verified_contents.json
                                                                      • Size 1KB
                                                                      • SHA256 43daa4139d3ed90f4b4635bd4d32346eb8e8528d0d5332052fcda8f7860db729
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      crs.pb
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\PKIMetadata\1759\crs.pb
                                                                      • Size 341KB
                                                                      • SHA256 627cfcfe9422c048429212cea2e3fd2e3e36aac2d41e5fe683eb5b8c147ff558
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      ct_config.pb
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\PKIMetadata\1759\ct_config.pb
                                                                      • Size 52KB
                                                                      • SHA256 c572872a7c7bc62e49c80a8e4b55206dda50657d967c3951c589f2cf4b05e884
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      kp_pinslist.pb
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\PKIMetadata\1759\kp_pinslist.pb
                                                                      • Size 10KB
                                                                      • SHA256 c5896bfb63e8ca691fcfcd9fff7c8eaef444f6a5333cdf82175d6ccaa767977a
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      safety_tips.pb
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\SafetyTips\3091\safety_tips.pb
                                                                      • Size 180KB
                                                                      • SHA256 3e2a292d081a583e0e612d9d7882898da20a966ee76c0a9162b271f8eb043360
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                      Submit Download

                                                                      assistant_prefs.json
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\assistant_prefs.json
                                                                      • Size 151B
                                                                      • SHA256 5e366d3ebb7fb33835001ee816e2f6b2c2a1b9c1f0c8232070e4dc38e9156f45
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      b2c35836-6059-4c01-93ec-cdb09351d65e.tmp
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\b2c35836-6059-4c01-93ec-cdb09351d65e.tmp
                                                                      • Size 151B
                                                                      • SHA256 18207caa2bc484343a25d54e93f323a3d061dd2ddef1384e233bfd0672f9c7e4
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      metadata.json
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                      • Size 13B
                                                                      • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                      • MD5 SHA1 SHA512
                                                                      Submit Download

                                                                      metadata.json
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                      • Size 908B
                                                                      • SHA256 52b33069edba85f72cd69f19ec9ead06e2b5dbd259f3d0bad4336c729aee50ec
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      metadata.json
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                      • Size 124B
                                                                      • SHA256 c74727215e1ec967a558b5fef0b88a3901480bc5a2adcdac733717d2c4bd6561
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      metadata.json
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                      • Size 684B
                                                                      • SHA256 960c3fa081e3860311a829435489c76c0819e8328b89f1b6716d5d11b913efb2
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      metadata.json
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                      • Size 236B
                                                                      • SHA256 102e7b09b2ba1875e7373cc566adb5e7f2d7cbbb76a054187887c90b18380ba0
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      metadata.json
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                      • Size 460B
                                                                      • SHA256 28dd3b80b7215b34e19a4d9c636a3d48cfe36202f19a57c42ed23ec8c3898625
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      metadata.json
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                      • Size 348B
                                                                      • SHA256 411d91cb378da761cdc2b1160c5aa46d45b2b9be420360ec17fda9530f5ee5f0
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      metadata.json
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                      • Size 796B
                                                                      • SHA256 d3bbd6aa723357747224f56efe16cb28d0263b679aa23c40d66cafc1bd90a6f6
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      metadata.json
                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                      • Size 572B
                                                                      • SHA256 a244df5941740a2b1912673bb27e0d7e379b60949934dfcf1b419bae967bda65
                                                                      • MD5 SHA1 SHA512 TLSH
                                                                      Submit Download

                                                                      memory/928-1445-0x00000180F91D0000-0x00000180F9200000-memory.dmp
                                                                      Download

                                                                      memory/968-3368-0x000001EACD110000-0x000001EACD140000-memory.dmp
                                                                      Download

                                                                      memory/1592-1449-0x0000022263390000-0x00000222633C0000-memory.dmp
                                                                      Download

                                                                      memory/1796-4197-0x0000025B587E0000-0x0000025B58810000-memory.dmp
                                                                      Download

                                                                      memory/2448-1446-0x0000019A04850000-0x0000019A04880000-memory.dmp
                                                                      Download

                                                                      memory/2448-3375-0x000001E5305A0000-0x000001E5305D0000-memory.dmp
                                                                      Download

                                                                      memory/2696-3370-0x000002B731C50000-0x000002B731C80000-memory.dmp
                                                                      Download

                                                                      memory/3432-1450-0x0000023519560000-0x0000023519590000-memory.dmp
                                                                      Download

                                                                      memory/3460-435-0x00007FFD08C60000-0x00007FFD08C61000-memory.dmp
                                                                      Download

                                                                      memory/3460-434-0x00007FFD07E70000-0x00007FFD07E71000-memory.dmp
                                                                      Download

                                                                      memory/3460-1476-0x000001E08ED00000-0x000001E08ED30000-memory.dmp
                                                                      Download

                                                                      memory/4052-1453-0x000002B07D030000-0x000002B07D060000-memory.dmp
                                                                      Download

                                                                      memory/4172-1447-0x0000026EE8720000-0x0000026EE8750000-memory.dmp
                                                                      Download

                                                                      memory/5128-1448-0x000002288EAC0000-0x000002288EAF0000-memory.dmp
                                                                      Download

                                                                      memory/5332-3371-0x000002A120E60000-0x000002A120E90000-memory.dmp
                                                                      Download

                                                                      memory/5408-3251-0x000001B89AF40000-0x000001B89AF70000-memory.dmp
                                                                      Download

                                                                      memory/5484-3250-0x000001BDE3D40000-0x000001BDE3D70000-memory.dmp
                                                                      Download

                                                                      memory/5896-2411-0x000001EE82700000-0x000001EE82730000-memory.dmp
                                                                      Download

                                                                      memory/5948-3377-0x0000026008290000-0x00000260082C0000-memory.dmp
                                                                      Download

                                                                      memory/5992-3369-0x0000022455770000-0x00000224557A0000-memory.dmp
                                                                      Download

                                                                      memory/6572-1484-0x000001DCCBE70000-0x000001DCCBEA0000-memory.dmp
                                                                      Download

                                                                      memory/6612-1432-0x00000200D6890000-0x00000200D68C0000-memory.dmp
                                                                      Download

                                                                      memory/6620-1433-0x000002991FE00000-0x000002991FE30000-memory.dmp
                                                                      Download

                                                                      memory/6628-1441-0x00000234374F0000-0x0000023437520000-memory.dmp
                                                                      Download

                                                                      memory/6648-1437-0x000001C8B8B30000-0x000001C8B8B60000-memory.dmp
                                                                      Download

                                                                      memory/6664-3248-0x0000019CC5320000-0x0000019CC5350000-memory.dmp
                                                                      Download

                                                                      memory/6676-2561-0x000001D014BF0000-0x000001D014C20000-memory.dmp
                                                                      Download

                                                                      memory/6696-1439-0x0000020FBDE00000-0x0000020FBDE30000-memory.dmp
                                                                      Download

                                                                      memory/6704-1440-0x0000019465360000-0x0000019465390000-memory.dmp
                                                                      Download

                                                                      memory/6716-1436-0x00000177B37E0000-0x00000177B3810000-memory.dmp
                                                                      Download

                                                                      memory/6728-1435-0x000002487D150000-0x000002487D180000-memory.dmp
                                                                      Download

                                                                      memory/6740-1429-0x000002217EE90000-0x000002217EEC0000-memory.dmp
                                                                      Download

                                                                      memory/6752-1442-0x000001DC96330000-0x000001DC96360000-memory.dmp
                                                                      Download

                                                                      memory/6788-1444-0x000001B2EFF00000-0x000001B2EFF30000-memory.dmp
                                                                      Download

                                                                      memory/6804-1434-0x00000243DB730000-0x00000243DB760000-memory.dmp
                                                                      Download

                                                                      memory/6816-1443-0x000002F28E5B0000-0x000002F28E5E0000-memory.dmp
                                                                      Download

                                                                      memory/6848-1438-0x0000024CEC890000-0x0000024CEC8C0000-memory.dmp
                                                                      Download

                                                                      memory/6896-3888-0x000002AD92250000-0x000002AD92280000-memory.dmp
                                                                      Download

                                                                      memory/7212-1454-0x0000025CD7500000-0x0000025CD7530000-memory.dmp
                                                                      Download

                                                                      memory/7420-1485-0x0000021F0F570000-0x0000021F0F5A0000-memory.dmp
                                                                      Download

                                                                      memory/7476-1452-0x00000247E5060000-0x00000247E5090000-memory.dmp
                                                                      Download

                                                                      memory/7484-3252-0x0000018D7C9B0000-0x0000018D7C9E0000-memory.dmp
                                                                      Download

                                                                      memory/7552-3135-0x000002EC50C00000-0x000002EC50C30000-memory.dmp
                                                                      Download

                                                                      memory/7564-3249-0x0000025345800000-0x0000025345830000-memory.dmp
                                                                      Download

                                                                      memory/7788-1637-0x00000200A61E0000-0x00000200A6210000-memory.dmp
                                                                      Download

                                                                      memory/7796-1638-0x000001D75F290000-0x000001D75F2C0000-memory.dmp
                                                                      Download

                                                                      memory/7832-1639-0x0000029154440000-0x0000029154470000-memory.dmp
                                                                      Download

                                                                      memory/7864-1640-0x0000020B937D0000-0x0000020B93800000-memory.dmp
                                                                      Download

                                                                      memory/7912-3374-0x00000259B31F0000-0x00000259B3220000-memory.dmp
                                                                      Download

                                                                      memory/8100-3373-0x0000021233670000-0x00000212336A0000-memory.dmp
                                                                      Download

                                                                      memory/8104-4152-0x000002600E4D0000-0x000002600E500000-memory.dmp
                                                                      Download

                                                                      memory/8132-3372-0x0000023DFF1B0000-0x0000023DFF1E0000-memory.dmp
                                                                      Download

                                                                      memory/8336-3376-0x000001E560760000-0x000001E560790000-memory.dmp
                                                                      Download

                                                                      memory/8520-4214-0x00000287BD990000-0x00000287BD9C0000-memory.dmp
                                                                      Download

                                                                      memory/9048-4171-0x000001F34BC60000-0x000001F34BC61000-memory.dmp
                                                                      Download

                                                                      memory/9048-4172-0x000001F34BC60000-0x000001F34BC61000-memory.dmp
                                                                      Download

                                                                      memory/9048-4177-0x000001F34BC60000-0x000001F34BC61000-memory.dmp
                                                                      Download

                                                                      memory/9048-4170-0x000001F34BC60000-0x000001F34BC61000-memory.dmp
                                                                      Download

                                                                      memory/9048-4179-0x000001F34BC60000-0x000001F34BC61000-memory.dmp
                                                                      Download

                                                                      memory/9048-4182-0x000001F34BC60000-0x000001F34BC61000-memory.dmp
                                                                      Download

                                                                      memory/9048-4181-0x000001F34BC60000-0x000001F34BC61000-memory.dmp
                                                                      Download

                                                                      memory/9048-4180-0x000001F34BC60000-0x000001F34BC61000-memory.dmp
                                                                      Download

                                                                      memory/9048-4178-0x000001F34BC60000-0x000001F34BC61000-memory.dmp
                                                                      Download

                                                                      memory/9048-4176-0x000001F34BC60000-0x000001F34BC61000-memory.dmp
                                                                      Download