Overview

overview

8

Static

static

3

OperaGXSetup.exe

windows10-2004-x64

8

OperaGXSetup.exe

windows11-ltsc_2024-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    02/10/2026, 17:21

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaGXSetup.exe
  • Size 4.0MB
  • Sample261002-vxavjss18q
  • SHA256 42f725341497873d008b9287310d9d3fdf2f7b49b335ca8ec33fd93187498328
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Checks computer location settings 2 TTPs 19 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Writes a Windows system DLL name to a user directory 2 TTPs 2 IoCs

    A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

    defense_evasion
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 12 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 45 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 35 IoCs
  • Suspicious use of SendNotifyMessage 43 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaGXSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaGXSetup.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4812
    • C:\Users\Admin\AppData\Local\Temp\7zSCC276E88\installer.exe
      C:\Users\Admin\AppData\Local\Temp\7zSCC276E88\installer.exe --server-tracking-blob=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
      2⤵
      • Downloads MZ/PE file
      • Executes dropped EXE
      • Enumerates connected drives
      • Reads the TCP/IP host and domain name from the registry
      • Modifies system certificate store
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4524
      • C:\Users\Admin\AppData\Local\Temp\7zSCC276E88\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zSCC276E88\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.76 --initial-client-data=0x24c,0x278,0x27c,0x274,0x280,0x7ff6642a7998,0x7ff6642a79a8,0x7ff6642a79b8
        3⤵
        • Executes dropped EXE
        PID:3708
      • C:\Users\Admin\AppData\Local\Temp\.opera\a2c6c8f9-07c8-446d-af65-1d0aebea07ca Opera GX Installer Temp\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\.opera\a2c6c8f9-07c8-446d-af65-1d0aebea07ca Opera GX Installer Temp\installer.exe" --version
        3⤵
        • Executes dropped EXE
        PID:4972
      • C:\Users\Admin\AppData\Local\Temp\7zSCC276E88\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\7zSCC276E88\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=4524 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\a2c6c8f9-07c8-446d-af65-1d0aebea07ca Opera GX Installer Temp\opera_package_20261002182142" --session-guid=f12c74a4-b8c2-49a4-8467-9c5033ac1295 --server-tracking-blob=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 --desktopshortcut=1 --wait-for-package --initial-proc-handle=D808000000000000
        3⤵
        • Executes dropped EXE
        • Enumerates connected drives
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:2920
        • C:\Users\Admin\AppData\Local\Temp\7zSCC276E88\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zSCC276E88\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.76 --initial-client-data=0x268,0x26c,0x270,0x240,0x274,0x7ff6642a7998,0x7ff6642a79a8,0x7ff6642a79b8
          4⤵
          • Executes dropped EXE
          PID:1464
        • C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\installer.exe
          "C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\installer.exe" --backend --initial-pid=4524 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\a2c6c8f9-07c8-446d-af65-1d0aebea07ca Opera GX Installer Temp\opera_package_202610021821421" --session-guid=f12c74a4-b8c2-49a4-8467-9c5033ac1295 --server-tracking-blob=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 --desktopshortcut=1 --install-subfolder=136.0.6008.76
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Modifies registry class
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:4972
          • C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.76 --initial-client-data=0x274,0x278,0x27c,0x250,0x280,0x7ff6c1377998,0x7ff6c13779a8,0x7ff6c13779b8
            5⤵
            • Executes dropped EXE
            PID:2756
          • C:\Users\Admin\AppData\Local\Temp\.opera\a2c6c8f9-07c8-446d-af65-1d0aebea07ca Opera GX Installer Temp\opera_package_202610021821421\assistant\assistant_installer.exe
            "C:\Users\Admin\AppData\Local\Temp\.opera\a2c6c8f9-07c8-446d-af65-1d0aebea07ca Opera GX Installer Temp\opera_package_202610021821421\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Writes a Windows system DLL name to a user directory
            • Adds Run key to start application
            • System Location Discovery: System Language Discovery
            • Enumerates system info in registry
            • Modifies Internet Explorer settings
            • Suspicious use of WriteProcessMemory
            PID:2204
            • C:\Users\Admin\AppData\Local\Temp\.opera\a2c6c8f9-07c8-446d-af65-1d0aebea07ca Opera GX Installer Temp\opera_package_202610021821421\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\a2c6c8f9-07c8-446d-af65-1d0aebea07ca Opera GX Installer Temp\opera_package_202610021821421\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.50 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x3fc9cc,0x3fc9d8,0x3fc9e4
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              PID:2280
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:3020
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.50 --initial-client-data=0x224,0x228,0x22c,0x220,0x230,0x48c9cc,0x48c9d8,0x48c9e4
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:3384
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Location Discovery: System Language Discovery
                • Enumerates system info in registry
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of SendNotifyMessage
                • Suspicious use of WriteProcessMemory
                PID:4324
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Suspicious use of WriteProcessMemory
                  PID:756
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\opera_crashreporter.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.76 --initial-client-data=0xc4,0x158,0x15c,0x164,0x168,0x7ff8b5b7ec30,0x7ff8b5b7ec40,0x7ff8b5b7ec50
                    9⤵
                    • Executes dropped EXE
                    PID:4908
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Suspicious use of WriteProcessMemory
                  PID:3316
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\opera_crashreporter.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.76 --initial-client-data=0x178,0x17c,0x174,0x144,0x170,0x7ff8b5b7ec30,0x7ff8b5b7ec40,0x7ff8b5b7ec50
                    9⤵
                    • Executes dropped EXE
                    PID:3140
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.50 --initial-client-data=0x260,0x264,0x268,0x23c,0x26c,0x737324,0x737330,0x73733c
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of WriteProcessMemory
                  PID:3784
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:4628
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.76 --initial-client-data=0x158,0x15c,0x154,0x124,0x150,0x7ff8b5b7ec30,0x7ff8b5b7ec40,0x7ff8b5b7ec50
                      10⤵
                      • Executes dropped EXE
                      PID:4232
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:2860
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.76 --initial-client-data=0x16c,0x170,0x174,0x168,0x178,0x7ff8b5b7ec30,0x7ff8b5b7ec40,0x7ff8b5b7ec50
                      10⤵
                      • Executes dropped EXE
                      PID:4788
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:4920
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.76 --initial-client-data=0x15c,0x160,0x158,0x128,0x154,0x7ff8b5b7ec30,0x7ff8b5b7ec40,0x7ff8b5b7ec50
                      10⤵
                      • Executes dropped EXE
                      PID:3884
          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            • Adds Run key to start application
            • Reads the TCP/IP host and domain name from the registry
            • Checks processor information in registry
            • Enumerates system info in registry
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of WriteProcessMemory
            PID:4404
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\opera_crashreporter.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.76 --initial-client-data=0x188,0x18c,0x190,0x184,0x194,0x7ff8b5b7ec30,0x7ff8b5b7ec40,0x7ff8b5b7ec50
              6⤵
              • Executes dropped EXE
              PID:4892
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1728,i,507385986649108568,17719935790375206794,262144 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1940 /prefetch:2
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5132
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=2104,i,7840518174684239576,2522403702315266389,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2108 /prefetch:3
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Reads the TCP/IP host and domain name from the registry
              • System Time Discovery
              PID:5172
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=2456,i,8076517013851076571,15074522660096688656,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2480 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5292
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3384,i,3440420505730840322,14758395932136487301,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3376 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:5464
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3352,i,4282169566945668489,16805520425221206031,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3484 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5472
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3340,i,5868165564273008221,12812249102375836578,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3504 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5480
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3328,i,1730831983274754291,11190926871039559485,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3524 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5488
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3420,i,9899590376858335038,14526895162473472873,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3444 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5496
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3364,i,108216782436332011,15111801353020949326,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3464 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5504
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/136.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4152,i,10475112454452606448,2830446760430603419,2097152 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4180 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5596
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\opera_gx_splash.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
              6⤵
              • Executes dropped EXE
              PID:5848
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/136.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4724,i,11105857797102903814,3533579510450056944,2097152 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4744 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:6064
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/136.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4916,i,18216404258016155267,7001254434067220387,2097152 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4932 /prefetch:2
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              PID:6136
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/136.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5084,i,9629155620205670122,11028293460242424342,2097152 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5096 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              PID:2368
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/136.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5336,i,10611978980937921529,11616573330013820613,2097152 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5340 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:4688
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=5448,i,18157696096738054459,2543456491092111953,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5460 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5516
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=5452,i,18378555263498991741,10233314158534131119,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5472 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5804
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=5464,i,11986622894323879929,1586908259777669536,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5480 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:5452
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=5468,i,7272968955330757773,10258760243707738294,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5580 /prefetch:8
              6⤵
              • Executes dropped EXE
              PID:5612
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/136.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6436,i,9113221984438256956,9152505993505969961,2097152 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6432 /prefetch:2
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              PID:6648
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/136.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6548,i,15378156125075893914,14686470633639518099,2097152 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6748 /prefetch:2
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6720
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=6700,i,3332421485893555632,14613884824309866416,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6552 /prefetch:8
              6⤵
              • Executes dropped EXE
              PID:2880
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/136.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=7104,i,18368290899632240336,359896790606658043,2097152 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=7096 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              PID:5604
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7252,i,12322371694042484390,12770065657239200446,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7268 /prefetch:8
              6⤵
              • Executes dropped EXE
              PID:5968
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7276,i,1843519067658066974,9884132551827328255,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7296 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6004
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
              6⤵
              • Executes dropped EXE
              • Reads the TCP/IP host and domain name from the registry
              PID:1276
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.76 --initial-client-data=0x27c,0x280,0x284,0x25c,0x288,0x7ff6bdf66598,0x7ff6bdf665a8,0x7ff6bdf665b8
                7⤵
                  PID:5420
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7788,i,7697789463944945080,12522461165237872715,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7804 /prefetch:8
                6⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:3240
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7756,i,7980131401013197353,3836315693218426912,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7820 /prefetch:8
                6⤵
                • Executes dropped EXE
                PID:5756
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7748,i,16444965762149609217,15934121100044147334,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=4892 /prefetch:8
                6⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6068
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7764,i,4391847345182956675,10701354886708927899,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7840 /prefetch:8
                6⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:5852
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7852,i,3829775785599553767,11572890829696313446,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7920 /prefetch:8
                6⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6212
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7876,i,17653849231345794381,18290587634226781688,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=7956 /prefetch:8
                6⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:2820
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7864,i,12698423432900190694,13919159476651015819,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=7936 /prefetch:8
                6⤵
                • Executes dropped EXE
                PID:4816
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7888,i,2546046189951240721,17514483599140491534,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=7976 /prefetch:8
                6⤵
                • Executes dropped EXE
                PID:6180
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7900,i,2785218731353705534,1369741752522303445,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=7968 /prefetch:8
                6⤵
                • Enumerates system info in registry
                PID:3932
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=9436,i,16285331243859389880,9712564800851620990,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9444 /prefetch:8
                6⤵
                • Enumerates system info in registry
                PID:5548
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/136.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=9596,i,5758613104540097610,15124947862421905208,2097152 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9612 /prefetch:2
                6⤵
                • Checks computer location settings
                • Enumerates system info in registry
                PID:7012
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=9780,i,11820954236323299869,17383185436219844046,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9652 /prefetch:8
                6⤵
                  PID:7004
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=9940,i,2029486534192728982,13381244447815770026,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9952 /prefetch:8
                  6⤵
                  • Enumerates system info in registry
                  PID:6920
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=10072,i,2611092456614585050,1826242782308395530,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9648 /prefetch:8
                  6⤵
                  • Enumerates system info in registry
                  PID:6284
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=10296,i,9092594255591381510,567142732008970515,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10136 /prefetch:8
                  6⤵
                    PID:2892
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/136.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=10424,i,8572715887519984404,8352277403448501435,2097152 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10464 /prefetch:1
                    6⤵
                    • Checks computer location settings
                    • Enumerates system info in registry
                    PID:6508
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=10632,i,836907620054926685,178753238152334165,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10760 /prefetch:8
                    6⤵
                    • Enumerates system info in registry
                    PID:5948
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\installer.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\installer.exe" --fix-taskbar-pins
                    6⤵
                    • Enumerates system info in registry
                    PID:7028
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\installer.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.76 --initial-client-data=0x26c,0x270,0x274,0x248,0x27c,0x7ff6c1377998,0x7ff6c13779a8,0x7ff6c13779b8
                      7⤵
                        PID:6668
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=10860,i,5415176891450676363,15945724978806634816,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10872 /prefetch:8
                      6⤵
                      • Enumerates system info in registry
                      PID:6624
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=10984,i,17754443969453502663,540064497116468545,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10996 /prefetch:8
                      6⤵
                        PID:3088
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=5776,i,10384216264615179548,17357077311343401409,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=5724 /prefetch:8
                        6⤵
                        • Enumerates system info in registry
                        PID:5720
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=6064,i,6845990553598013549,18414405723475396521,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=10976 /prefetch:8
                        6⤵
                          PID:6756
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=6068,i,15196439100226402148,4883738699639262863,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=3824 /prefetch:8
                          6⤵
                            PID:5996
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3800,i,7922881620943312276,8812245918967713827,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=11088 /prefetch:8
                            6⤵
                            • Enumerates system info in registry
                            PID:6340
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=9592,i,17606538239269991829,17518577581180713129,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=10344 /prefetch:8
                            6⤵
                              PID:6428
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=9912,i,11739924406096856862,3489091634163466515,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=7540 /prefetch:8
                              6⤵
                              • Enumerates system info in registry
                              PID:6568
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3836,i,5432419882574697738,2318003652745207521,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=8804 /prefetch:8
                              6⤵
                              • Enumerates system info in registry
                              PID:4816
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7204,i,9933132891846197218,8031625784339758360,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=4184 /prefetch:8
                              6⤵
                              • Enumerates system info in registry
                              PID:5968
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=9976,i,6436481314537461791,10264122616461423424,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=9964 /prefetch:8
                              6⤵
                                PID:7100
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=8908,i,3405343633803519209,12952499456845006767,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=7948 /prefetch:8
                                6⤵
                                • Enumerates system info in registry
                                PID:6228
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=8148,i,9482366663615206953,1358587031164293704,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=8200 /prefetch:8
                                6⤵
                                  PID:4168
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3916,i,15790321708615411944,14117658588888610992,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=11092 /prefetch:8
                                  6⤵
                                  • Enumerates system info in registry
                                  PID:5600
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3364,i,18071363769804477528,12262718429773007597,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=5880 /prefetch:8
                                  6⤵
                                    PID:6180
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/136.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=3976,i,6915796893088673606,7209816504787157375,2097152 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=10960 /prefetch:2
                                    6⤵
                                    • Checks computer location settings
                                    PID:5592
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=8856,i,14335481840760154958,11470793124501575715,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=8852 /prefetch:8
                                    6⤵
                                    • Enumerates system info in registry
                                    PID:6636
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7348,i,11724436321309860443,2081367450259724454,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=7324 /prefetch:8
                                    6⤵
                                    • Enumerates system info in registry
                                    PID:6196
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=8776,i,17458012531073507468,13653571498051367206,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=8448 /prefetch:8
                                    6⤵
                                      PID:6604
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/136.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=7676,i,12585640627070195716,16357963717411600027,2097152 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=9420 /prefetch:2
                                      6⤵
                                      • Checks computer location settings
                                      • Enumerates system info in registry
                                      PID:7056
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7524,i,2580341809008969837,4303723886178520964,524288 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=5728 /prefetch:8
                                      6⤵
                                        PID:7656
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/136.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=7800,i,6386647719993177236,1860534624495965673,2097152 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=8244 /prefetch:2
                                        6⤵
                                        • Checks computer location settings
                                        PID:7808
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/136.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=7768,i,16392065007253790327,9742076232408742002,2097152 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=7520 /prefetch:2
                                        6⤵
                                        • Checks computer location settings
                                        • Enumerates system info in registry
                                        PID:7516
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/136.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=9980,i,16284093126598357425,15889142861065671079,2097152 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=9988 /prefetch:2
                                        6⤵
                                        • Checks computer location settings
                                        • Enumerates system info in registry
                                        PID:4564
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/136.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=6032,i,13570064597277455437,17779335398156138695,2097152 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=7536 /prefetch:2
                                        6⤵
                                        • Checks computer location settings
                                        • Enumerates system info in registry
                                        PID:6512
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/136.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=7284,i,17936382151712762103,4861136087515507994,2097152 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=11088 /prefetch:2
                                        6⤵
                                        • Checks computer location settings
                                        PID:5068
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/136.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-test:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=10664,i,3106899476912803592,2233628651157485805,2097152 --field-trial-handle=1948,i,11925673701684000068,6875766780164796341,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,12888159612664295156,10480086260081671093,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=10928 /prefetch:2
                                        6⤵
                                        • Checks computer location settings
                                        • Enumerates system info in registry
                                        PID:7588
                                • C:\Users\Admin\AppData\Local\Temp\.opera\a2c6c8f9-07c8-446d-af65-1d0aebea07ca Opera GX Installer Temp\opera_package_202610021821421\assistant\Opera_GX_assistant_136.0.6008.50_Setup.exe_sfx.exe
                                  "C:\Users\Admin\AppData\Local\Temp\.opera\a2c6c8f9-07c8-446d-af65-1d0aebea07ca Opera GX Installer Temp\opera_package_202610021821421\assistant\Opera_GX_assistant_136.0.6008.50_Setup.exe_sfx.exe"
                                  3⤵
                                  • Executes dropped EXE
                                  • Writes a Windows system DLL name to a user directory
                                  • System Location Discovery: System Language Discovery
                                  PID:4644
                                • C:\Users\Admin\AppData\Local\Temp\.opera\a2c6c8f9-07c8-446d-af65-1d0aebea07ca Opera GX Installer Temp\opera_package_202610021821421\assistant\assistant_installer.exe
                                  "C:\Users\Admin\AppData\Local\Temp\.opera\a2c6c8f9-07c8-446d-af65-1d0aebea07ca Opera GX Installer Temp\opera_package_202610021821421\assistant\assistant_installer.exe" --version
                                  3⤵
                                  • Executes dropped EXE
                                  • Loads dropped DLL
                                  • System Location Discovery: System Language Discovery
                                  • Enumerates system info in registry
                                  • Suspicious use of WriteProcessMemory
                                  PID:1220
                                  • C:\Users\Admin\AppData\Local\Temp\.opera\a2c6c8f9-07c8-446d-af65-1d0aebea07ca Opera GX Installer Temp\opera_package_202610021821421\assistant\assistant_installer.exe
                                    "C:\Users\Admin\AppData\Local\Temp\.opera\a2c6c8f9-07c8-446d-af65-1d0aebea07ca Opera GX Installer Temp\opera_package_202610021821421\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.50 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x3fc9cc,0x3fc9d8,0x3fc9e4
                                    4⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    • System Location Discovery: System Language Discovery
                                    PID:636
                            • C:\Windows\system32\wbem\unsecapp.exe
                              C:\Windows\system32\wbem\unsecapp.exe -Embedding
                              1⤵
                                PID:5124
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart
                                1⤵
                                • Executes dropped EXE
                                • Loads dropped DLL
                                • Enumerates system info in registry
                                • Suspicious use of WriteProcessMemory
                                PID:5568
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\opera_crashreporter.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.76 --initial-client-data=0x158,0x15c,0x154,0x124,0x150,0x7ff8b5b7ec30,0x7ff8b5b7ec40,0x7ff8b5b7ec50
                                  2⤵
                                  • Executes dropped EXE
                                  PID:5744
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
                                1⤵
                                • Reads the TCP/IP host and domain name from the registry
                                • Enumerates system info in registry
                                PID:1936
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.76 --initial-client-data=0x274,0x278,0x27c,0x210,0x280,0x7ff6bdf66598,0x7ff6bdf665a8,0x7ff6bdf665b8
                                  2⤵
                                    PID:6060
                                  • C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe
                                    "C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe" --version
                                    2⤵
                                      PID:6540

                                  Network

                                        MITRE ATT&CK Enterprise v16

                                        Reconnaissance

                                        Resource Development

                                        Initial Access

                                        Execution

                                        Persistence

                                        Boot or Logon Autostart Execution

                                        1
                                        T1547

                                        Registry Run Keys / Startup Folder

                                        1
                                        T1547.001

                                        Event Triggered Execution

                                        1
                                        T1546

                                        Component Object Model Hijacking

                                        1
                                        T1546.015

                                        Hijack Execution Flow

                                        1
                                        T1574

                                        DLL Search Order Hijacking

                                        1
                                        T1574.001

                                        Privilege Escalation

                                        Boot or Logon Autostart Execution

                                        1
                                        T1547

                                        Registry Run Keys / Startup Folder

                                        1
                                        T1547.001

                                        Event Triggered Execution

                                        1
                                        T1546

                                        Component Object Model Hijacking

                                        1
                                        T1546.015

                                        Hijack Execution Flow

                                        1
                                        T1574

                                        DLL Search Order Hijacking

                                        1
                                        T1574.001

                                        Defense Evasion

                                        Hijack Execution Flow

                                        1
                                        T1574

                                        DLL Search Order Hijacking

                                        1
                                        T1574.001

                                        Masquerading

                                        1
                                        T1036

                                        Match Legitimate Name or Location

                                        1
                                        T1036.005

                                        Modify Registry

                                        3
                                        T1112

                                        Subvert Trust Controls

                                        1
                                        T1553

                                        Install Root Certificate

                                        1
                                        T1553.004

                                        Credential Access

                                        Credentials from Password Stores

                                        1
                                        T1555

                                        Credentials from Web Browsers

                                        1
                                        T1555.003

                                        Unsecured Credentials

                                        1
                                        T1552

                                        Credentials In Files

                                        1
                                        T1552.001

                                        Discovery

                                        Peripheral Device Discovery

                                        1
                                        T1120

                                        Query Registry

                                        6
                                        T1012

                                        System Information Discovery

                                        5
                                        T1082

                                        System Location Discovery

                                        1
                                        T1614

                                        System Language Discovery

                                        1
                                        T1614.001

                                        System Network Configuration Discovery

                                        1
                                        T1016

                                        System Time Discovery

                                        1
                                        T1124

                                        Lateral Movement

                                        Collection

                                        Data from Local System

                                        1
                                        T1005

                                        Command and Control

                                        Exfiltration

                                        Impact

                                        Replay Monitor

                                        Loading Replay Monitor...

                                        Downloads

                                        f_00001d
                                        • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\Cache\Cache_Data\f_00001d
                                        • Size 45KB
                                        • SHA256 88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        snapshot-new.baf
                                        • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\Cache\No_Vary_Search\snapshot-new.baf
                                        • Size 20B
                                        • SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        f_000001
                                        • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\System Cache\Cache_Data\f_000001
                                        • Size 215KB
                                        • SHA256 3d80400deca1d0d0aee1dde96267fcfe4dbc846915b01799bd5976dc47287835
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        136.0.6008.76.manifest
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\136.0.6008.76.manifest
                                        • Size 225B
                                        • SHA256 9dfc1f09de7f3d585c5b6bbb366e008d38507b8a9bcbc461bfe2a69d9c380629
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        150x150Logo.scale-100.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\Assets\150x150Logo.scale-100.png
                                        • Size 2KB
                                        • SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        150x150Logo.scale-100_contrast-white.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\Assets\150x150Logo.scale-100_contrast-white.png
                                        • Size 1KB
                                        • SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        150x150Logo.scale-140.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\Assets\150x150Logo.scale-140.png
                                        • Size 3KB
                                        • SHA256 a36a13a5d5e3d39e3018ccc5f8859944c87256f8be24a3c08a6bf3cb06a26804
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        150x150Logo.scale-140_contrast-white.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\Assets\150x150Logo.scale-140_contrast-white.png
                                        • Size 2KB
                                        • SHA256 0bd63fe653885286e180fbdf6d1dadc66af242b8ed6bd1d03d8c5eccc20e91d7
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        150x150Logo.scale-180.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\Assets\150x150Logo.scale-180.png
                                        • Size 3KB
                                        • SHA256 6a8f64754c75edcc9abc1138e44acbd7064d7e8e2a28783939241dbd6afa30a5
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        150x150Logo.scale-180_contrast-white.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\Assets\150x150Logo.scale-180_contrast-white.png
                                        • Size 3KB
                                        • SHA256 a706b332e6a846357a86c30d0e8bb7697e7dd55c2ae592dd45611ddce0c0bf14
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        150x150Logo.scale-80.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\Assets\150x150Logo.scale-80.png
                                        • Size 1KB
                                        • SHA256 7e6b0d9ea7fda1b5ca7a0b01290521dff943da4cbf1498412ca7d749db42c32d
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        150x150Logo.scale-80_contrast-white.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\Assets\150x150Logo.scale-80_contrast-white.png
                                        • Size 1KB
                                        • SHA256 dfd1054f989cdee25f19ea792f363f042a125cab537a424f0224bbee13607e39
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        70x70Logo.scale-100.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\Assets\70x70Logo.scale-100.png
                                        • Size 1KB
                                        • SHA256 a333d7e4293f5269426b3fcb673a284f3708a66f957de62403b6570b24bae8f5
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        70x70Logo.scale-100_contrast-white.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\Assets\70x70Logo.scale-100_contrast-white.png
                                        • Size 1KB
                                        • SHA256 ebbe0b4761ea8968a0a3fafb383ac7ae175e98cd31a0f41bdf5fcb43469b58ec
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        70x70Logo.scale-140.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\Assets\70x70Logo.scale-140.png
                                        • Size 1KB
                                        • SHA256 207519f1c7b6c7509bfeb7b55724997eec6456c8baf55e882e72fc5cd43da221
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        70x70Logo.scale-140_contrast-white.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\Assets\70x70Logo.scale-140_contrast-white.png
                                        • Size 1KB
                                        • SHA256 464afaf960c32abdc2c3937a48bf14c5d1a819b017e719fded591d43a65d94c4
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        70x70Logo.scale-180.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\Assets\70x70Logo.scale-180.png
                                        • Size 2KB
                                        • SHA256 d6367dbc074e37f3488c26b0bad229bfe99f5c6bb0e28d37b41906c436152b57
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        70x70Logo.scale-180_contrast-white.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\Assets\70x70Logo.scale-180_contrast-white.png
                                        • Size 2KB
                                        • SHA256 5d46e4056f3915c279f1fa9edf61d93529fbcae5c59d616380ec5d9405b7763d
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        70x70Logo.scale-80.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\Assets\70x70Logo.scale-80.png
                                        • Size 1KB
                                        • SHA256 dc20e5aa2b500cd5b5c9f89647d3487810685c94268f22678e27820e2454bb3e
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        70x70Logo.scale-80_contrast-white.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\Assets\70x70Logo.scale-80_contrast-white.png
                                        • Size 901B
                                        • SHA256 dd6f46d32c3e235508f9e4c7d7f993bd807d955bca7e63cf3d57c6c4c102f46d
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        CChromaEditorLibrary64.dll
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\CChromaEditorLibrary64.dll
                                        • Size 145KB
                                        • SHA256 5f85bdeb557ea48ac9014d71b2fc14ccb121f8d44cfadf6908b75acb398fd76b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        CUESDK.x64_2017.dll
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\CUESDK.x64_2017.dll
                                        • Size 474KB
                                        • SHA256 1e7b0f4a99da7bff114811ac74c6770b592f3877436bea80ae3885c505137807
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        assistant_package
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\assistant_package
                                        • Size 3.6MB
                                        • SHA256 b8aa9588e459b0a20fc9b025ea4ec12e9024a989a7300804746d5af0ff174bcf
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        d3dcompiler_47.dll
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\d3dcompiler_47.dll
                                        • Size 4.5MB
                                        • SHA256 6972371565a32accb81dd08d3c71fa0da33d7498ba3b793ef7e3c1d034b3894a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        dxcompiler.dll
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\dxcompiler.dll
                                        • Size 24.6MB
                                        • SHA256 7476e0baae5f995570e16e9bafcbaa4f8dbdb627442d1d8b7be82262b4a3104a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        dxil.dll
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\dxil.dll
                                        • Size 1.5MB
                                        • SHA256 5e60214700fe4010de663ab171e6d3db7a3a9d66950c69c35260e00c0c6d9c9d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        files_list
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\files_list
                                        • Size 4KB
                                        • SHA256 36de03857d0e663ebd8b019c252b29b211ac17f3cb0d71bfe19c29c08aa87245
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        headless_command_resources.pak
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\headless_command_resources.pak
                                        • Size 2KB
                                        • SHA256 90e398ef08a0178d1efd373addb5070a551011be8b9d27fcc2f234e430a8ad98
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        icudtl.dat
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\icudtl.dat
                                        • Size 10.4MB
                                        • SHA256 f11071c692e85689891070cb6f68120dc1a49941325325f7e5b017af42483e72
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        installer.exe
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\installer.exe
                                        • Size 9.2MB
                                        • SHA256 cdd0be1bf1c6f5b28085cb391f4a7027725c8f37e20d4319f55835e7dd21c98f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        installer_helper_64.exe
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\installer_helper_64.exe
                                        • Size 601KB
                                        • SHA256 466bbf62232bac1483a59c1c96740c115df819d117df4b16d3f83d608d5bdbcb
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        libEGL.dll
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\libEGL.dll
                                        • Size 460KB
                                        • SHA256 3d6d1603567054f1967b5e0e54bf2f05bef21b44f421536502c7846a6eca82ab
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        libGLESv2.dll
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\libGLESv2.dll
                                        • Size 460KB
                                        • SHA256 f73672912d0139f9f4234883a48b1f5f5bc48c07c0f93e994e9e85ae2dafd6d9
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        bg.pak
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\localization\bg.pak
                                        • Size 1.0MB
                                        • SHA256 e9458ed46ef98c4f80447b24006f7f16ccf174d00481f4cb575a6ece185cc556
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        bn.pak
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\localization\bn.pak
                                        • Size 1.3MB
                                        • SHA256 947d0364e8fd8b0f608b5fc4a1e654e2724a547f672fa552dcc7217424948f55
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        ca.pak
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\localization\ca.pak
                                        • Size 658KB
                                        • SHA256 99e3e10b63eabce1af532fdd418d5aabb1dc38ec77cc531ba8e0027c63a686bd
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        cs.pak
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\localization\cs.pak
                                        • Size 656KB
                                        • SHA256 7fbfcb4fcbd2b76323758fadad47829fec7379b1cf6688db678bc78cf70ea105
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        da.pak
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\localization\da.pak
                                        • Size 603KB
                                        • SHA256 091d0dc756138c63b6f0762a1c66c4bdee78533d63af70cf8a549ad1bc0a9a07
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        de.pak
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\localization\de.pak
                                        • Size 654KB
                                        • SHA256 4973082aa4cd1fd75b8e2f665d5f5cfffb3cbe78067a5ee6f3c79ee3d41a34b0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        el.pak
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\localization\el.pak
                                        • Size 1.1MB
                                        • SHA256 7fc21610c46834dbef9b851a03d661ecc2418308981674884d97a621f37751e3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        en-GB.pak
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\localization\en-GB.pak
                                        • Size 531KB
                                        • SHA256 a0a9b72c9b01f0d029e09304fa69bdd3476b38df2c803a4e2f2021298a37e08b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        en-US.pak
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\localization\en-US.pak
                                        • Size 534KB
                                        • SHA256 7dfb532e60edbc809bd914e2570074c4303e8314616ab9c5bcd7ad144e6d29e2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        es-419.pak
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\localization\es-419.pak
                                        • Size 645KB
                                        • SHA256 44a0805c3e1744fc9d6a7d3f8c08541a6d86fc1ef6a8fd5ae2d4434355e4c08f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        es.pak
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.76\localization\es.pak
                                        • Size 640KB
                                        • SHA256 9f354f53de2eb53f385a78d5a01d9e400906cdfeada791115d1c0d9381ff116c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        browser_assistant.exe
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                        • Size 5.3MB
                                        • SHA256 4d033b0d0804e98418d736c57aef51d502bc131637e688a8381f2b8133a5856b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        opera_autoupdate.exe
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                        • Size 7.4MB
                                        • SHA256 bb2808ef3e626d3271b4714060280904cb27ebe5d09895142731b247f686979d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        installer_prefs.json.backup
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json.backup
                                        • Size 2KB
                                        • SHA256 1a7d77c6d3759418cfeceb039551de3b97e984d5b7a3f74c7fabdaf282355ebf
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        installer_prefs.json2bd586b2-a482-44c9-bbb2-d44321da6091.tmp
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json2bd586b2-a482-44c9-bbb2-d44321da6091.tmp
                                        • Size 2KB
                                        • SHA256 3a7ae5306616ada561bcaa2375c15c43f6593329a46239660660470a31911cc8
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        opera.exe
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        • Size 3.4MB
                                        • SHA256 98aee9718f253d3c1bb069b020b5492489eba534e0280257d6b2eb38b32340b5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        Opera GX Browser.lnk
                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\a2c6c8f9-07c8-446d-af65-1d0aebea07ca Opera GX Installer Temp\opera_package_202610021821421\Opera GX Browser.lnk
                                        • Size 1KB
                                        • SHA256 20926470259b78c0762b497971bd311480537226210e24af588343696c9279dc
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        Opera_GX_assistant_136.0.6008.50_Setup.exe_sfx.exe
                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\a2c6c8f9-07c8-446d-af65-1d0aebea07ca Opera GX Installer Temp\opera_package_202610021821421\assistant\Opera_GX_assistant_136.0.6008.50_Setup.exe_sfx.exe
                                        • Size 2.9MB
                                        • SHA256 cdb600359a2ee392e9ff11e680770171531760b6d64319cf6bffc5c1341a0dc0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        assistant_installer.exe
                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\a2c6c8f9-07c8-446d-af65-1d0aebea07ca Opera GX Installer Temp\opera_package_202610021821421\assistant\assistant_installer.exe
                                        • Size 2.5MB
                                        • SHA256 5dda5f3ca9e230e79dc6c74ab74afe8d027cbd4db293ab0260dcf71010f6ff9b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        dbgcore.dll
                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\a2c6c8f9-07c8-446d-af65-1d0aebea07ca Opera GX Installer Temp\opera_package_202610021821421\assistant\dbgcore.dll
                                        • Size 196KB
                                        • SHA256 0a08d02dbba60e940694a2c154d4b78969df546d40d8ec314cf6be1753f009d1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        dbghelp.dll
                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\a2c6c8f9-07c8-446d-af65-1d0aebea07ca Opera GX Installer Temp\opera_package_202610021821421\assistant\dbghelp.dll
                                        • Size 1.8MB
                                        • SHA256 bb4c23816f445ae5122ba5fc7d8cdd77bb9e519ab107f450320829a98df52175
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        installer_prefs_include.json
                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\a2c6c8f9-07c8-446d-af65-1d0aebea07ca Opera GX Installer Temp\opera_package_202610021821421\installer_prefs_include.json
                                        • Size 781B
                                        • SHA256 823f77f3e6e4109a3910f1eeeff7d7b4200eb6810a0094ed90f45a8681d386ad
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        installer_prefs_include.json6bff5bef-1b05-4e5e-99b4-969c7f29ecf7.tmp
                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\a2c6c8f9-07c8-446d-af65-1d0aebea07ca Opera GX Installer Temp\opera_package_202610021821421\installer_prefs_include.json6bff5bef-1b05-4e5e-99b4-969c7f29ecf7.tmp
                                        • Size 796B
                                        • SHA256 6a40f593897a4936a8e653c51c3e34bf2f366fd1b97c616973eb808a8f1304fc
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        installer_prefs_include.json92d4b1da-001c-4a78-9558-4077c2953c20.tmp
                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\a2c6c8f9-07c8-446d-af65-1d0aebea07ca Opera GX Installer Temp\opera_package_202610021821421\installer_prefs_include.json92d4b1da-001c-4a78-9558-4077c2953c20.tmp
                                        • Size 1KB
                                        • SHA256 6e8b40993988fb2f15d43844b5658505be9acd3489449ef1900c16470d353ac4
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        custom_partner_content.json
                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\a2c6c8f9-07c8-446d-af65-1d0aebea07ca Opera GX Installer Temp\opera_package_202610021821421\resources\custom_partner_content.json
                                        • Size 245KB
                                        • SHA256 84bc1efb211c6b45f2906278a36f1414922f994a9611bbee7713ffd4ae21e967
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        installer.exe
                                        • Path C:\Users\Admin\AppData\Local\Temp\7zSCC276E88\installer.exe
                                        • Size 9.2MB
                                        • SHA256 2511fbf843679b4d8070f3ee4360abab2420ba0dc5f359faecb724e51c6dffe6
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        messages.json
                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4404_1019843076\CRX_INSTALL\_locales\en\messages.json
                                        • Size 396B
                                        • SHA256 1bcb4888a65788a50ed88f4bd95955d1dafdc950b5ef4609b37f42934a4bf3b9
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        Icon_Light_Neutral.png
                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4404_1019843076\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                        • Size 2KB
                                        • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        Icon_Light_Neutral.png
                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4404_1019843076\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
                                        • Size 962B
                                        • SHA256 e8adb8a9dcca121a1853749ebef122b84a995ebf8775cd27b0dd54bab9840bd1
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        bd3fb208-4d92-4c6b-b388-00cb8cd58432.tmp
                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4404_1019843076\bd3fb208-4d92-4c6b-b388-00cb8cd58432.tmp
                                        • Size 2.6MB
                                        • SHA256 19bc35ca347a6560c0183e56da6bee3353737e78aa9eff9111c5ebd897b0cfd5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        0d863b2c-1271-4be6-a221-ddf9f099370d.tmp
                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4404_1733966711\0d863b2c-1271-4be6-a221-ddf9f099370d.tmp
                                        • Size 13KB
                                        • SHA256 ce8adf970c3290b7ea94c85727c5abe7eb232e16026a1f8f876ad7f3ec03573d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        7a23ffb7-9bd1-4590-abcc-9de3109d9ab9.tmp
                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4404_1940371646\7a23ffb7-9bd1-4590-abcc-9de3109d9ab9.tmp
                                        • Size 472KB
                                        • SHA256 4b9b79291aca9c45d54ae238655f41b7a0eecb0b80fb3d172cd0b1d75e712540
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        messages.json
                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4404_1940371646\CRX_INSTALL\_locales\en\messages.json
                                        • Size 2KB
                                        • SHA256 13f83e7ad61d853293597de9e7583e7724680b7c80c31d0834097f2a7022741a
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        315194d5-231b-4946-a953-461371474541.tmp
                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4404_581799319\315194d5-231b-4946-a953-461371474541.tmp
                                        • Size 46KB
                                        • SHA256 176a736c95c08746480a0e25f7acf323d502d0f6aac4b4dfbeb2713513af8a52
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        logo_128.png
                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4404_581799319\CRX_INSTALL\public\icons\logo_128.png
                                        • Size 7KB
                                        • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        logo_16.png
                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4404_581799319\CRX_INSTALL\public\icons\logo_16.png
                                        • Size 653B
                                        • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        logo_32.png
                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4404_581799319\CRX_INSTALL\public\icons\logo_32.png
                                        • Size 1KB
                                        • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        logo_48.png
                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4404_581799319\CRX_INSTALL\public\icons\logo_48.png
                                        • Size 2KB
                                        • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        logo_64.png
                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4404_581799319\CRX_INSTALL\public\icons\logo_64.png
                                        • Size 2KB
                                        • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        9bf3c533-8da2-4024-84d8-5b37a6c14f83.tmp
                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4404_596560174\9bf3c533-8da2-4024-84d8-5b37a6c14f83.tmp
                                        • Size 1.2MB
                                        • SHA256 9cc80630179e77c7425346c110a59c7de35b5b000253dd322c7853867fbe3316
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        icon-57.png
                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4404_596560174\CRX_INSTALL\icons\icon-57.png
                                        • Size 873B
                                        • SHA256 8462b976325b85e3fe1140685159792a700d5382f2307d5eb667af10e76d8964
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        6093b209-7936-4a8d-a695-5af39cf958dc.tmp
                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4404_766221590\6093b209-7936-4a8d-a695-5af39cf958dc.tmp
                                        • Size 4.6MB
                                        • SHA256 e81986014a4fb55c0aa220745d2433c51ad29166b32693de8911784dd3920584
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        favicon_opera_one.png
                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4404_766221590\CRX_INSTALL\favicon_opera_one.png
                                        • Size 2KB
                                        • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        Opera GX Browser.lnk
                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera GX Browser.lnk
                                        • Size 2KB
                                        • SHA256 532ab862f86345b17670429e8040a43f8d4ab865e735c03e70b270f8d7816a5b
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        3XRJHQYWN0ZJX8BIYZUP.temp
                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3XRJHQYWN0ZJX8BIYZUP.temp
                                        • Size 24KB
                                        • SHA256 5ea3fec10538b0fc6e7c4396afc72deeea7d1f8351ab261e359f25c43b16a9d3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        f9c64c77005d378d.customDestinations-ms
                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\f9c64c77005d378d.customDestinations-ms
                                        • Size 24KB
                                        • SHA256 b4615b69ec80be542754e4cfca72ff9a0cc0a7a46579603600b21473ee721b25
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        settings.dat
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                        • Size 40B
                                        • SHA256 f4c00445d95b4c8fe6f56da2c258f7c6bf63be52d429b4dfee4cda76555acac5
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        Bookmarks
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Bookmarks
                                        • Size 23KB
                                        • SHA256 16af377fdedf7eeb2312bd09a75cf18bef528cb3b5c4460fa622f5f9dd95490c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        Bookmarks075751f4-939d-4921-90d9-aaff59dc6ea3.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Bookmarks075751f4-939d-4921-90d9-aaff59dc6ea3.tmp
                                        • Size 24KB
                                        • SHA256 1482551c67ed0572e29ef87bbe6fc6f40d993fd0cd7871c3d3ba50e469c59eb8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        temp-index
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\temp-index
                                        • Size 1KB
                                        • SHA256 c9aa8a5ae13383acc2ed0b6d560bfb54d60f633331ec301be20753485acaca8c
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        the-real-index
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                        • Size 48B
                                        • SHA256 58c16138b5a2896c26edf61a318748cede5b79eaf1ce8ac09634b3cd047b1eae
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        data_0
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_0
                                        • Size 8KB
                                        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                        • MD5 SHA1 SHA512 SSDEEP
                                        Submit Download

                                        data_1
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_1
                                        • Size 264KB
                                        • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                        • MD5 SHA1 SHA512 SSDEEP
                                        Submit Download

                                        data_2
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_2
                                        • Size 8KB
                                        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                        • MD5 SHA1 SHA512 SSDEEP
                                        Submit Download

                                        data_3
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_3
                                        • Size 8KB
                                        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                        • MD5 SHA1 SHA512 SSDEEP
                                        Submit Download

                                        messages.json
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\_locales\en\messages.json
                                        • Size 2KB
                                        • SHA256 57e2b257a65fa5e980c619214ed9ae25580bbd581143e28abac49928b31977a6
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        background.js
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\background.js
                                        • Size 17KB
                                        • SHA256 c7a162a7650887dffe12034ddbba5ddb91ca5bf4f5478f59ded324f7e088bacb
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        twitch.png
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch.png
                                        • Size 677B
                                        • SHA256 959a810529fcf478d40d02fc418e6223e38bdeba0deae8e83b55028d47bbef6b
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        twitch16.png
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch16.png
                                        • Size 370B
                                        • SHA256 6534efc770a8a32c881258029c2f2b9d9f1b75228f53bf9b4cd2b9a9689884e0
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        twitch48.png
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch48.png
                                        • Size 921B
                                        • SHA256 47e37c0726206401cc69cb6ab0fdda79b364356a5e2fdbd5ce479bfbb965f245
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        colors.js
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\colors.js
                                        • Size 5KB
                                        • SHA256 80cc31214c554212050ac62dd04bdb33b012b3b42634ef16f461aca2dc8572fb
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        preferences.js
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\preferences.js
                                        • Size 4KB
                                        • SHA256 424634b7911f5002d426d9455139bfe578e0a3d8143a4b5f23597ffc22ec0923
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        stats.js
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\stats.js
                                        • Size 1KB
                                        • SHA256 f2b7e0086a62415550738764edbd98a22ed7524623343b4276951b8cb2207b52
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        twitch_api.js
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\twitch_api.js
                                        • Size 4KB
                                        • SHA256 db2f7f893c141525ecb33ce344471ef44dd457980f1fe138a91759d556b4a002
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        volume.js
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\volume.js
                                        • Size 1KB
                                        • SHA256 3a30f4a95a4ca688fafa4c5594c039bbba5e5d14187dd1da286e48387d3e3d7e
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        main.js
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.8_0\main.js
                                        • Size 47KB
                                        • SHA256 9cc5e1dd96d76735499257c52d632a0a9e17ed4da929035067dadcc586000335
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        3ebfaf1c4dcf4f3b0255.ttf
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\1.2.335_0\3ebfaf1c4dcf4f3b0255.ttf
                                        • Size 316KB
                                        • SHA256 5ae3965ae20c8090af12aeafec6882ef41829397f28f554e89fbabdf9069ea7e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        background.js
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\1.2.335_0\background.js
                                        • Size 365KB
                                        • SHA256 5acb8f0a54c6774e0832d8ee9c7fac2dd593b1a74c89c5f4a9ba3f12d878ebcf
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        compact.html
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\1.2.335_0\compact.html
                                        • Size 921B
                                        • SHA256 7b55030e6b2aac8c8d561438bb286a14b02b71059722969c7d483c0dc7ef3b07
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        icon-57.png
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\1.2.335_0\icons\icon-57.png
                                        • Size 863B
                                        • SHA256 7a1ae78e7cb77b74cbaefa5b92ec32384761499375738898e71bd43f018f3a17
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        popup.css
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\1.2.335_0\popup.css
                                        • Size 65KB
                                        • SHA256 3e7646be9dce506c5f0b4f08860feab227a9ca4f5ba1a24145ff7bff145c1f18
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        scraping-method-Dq4mm50p.js
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\scraping-method-Dq4mm50p.js
                                        • Size 6KB
                                        • SHA256 99c8d4f76ebc9fc6cea115065570a12d41903c93e18c1c6385b5b2e70256eb70
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        service-worker.ts-fle0M1Xd.js
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\service-worker.ts-fle0M1Xd.js
                                        • Size 13KB
                                        • SHA256 4ebb6cb9c3f033302d6a8c31329009082bafeab73c39cca179511b5a972ba8f8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        service-worker-loader.js
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\service-worker-loader.js
                                        • Size 49B
                                        • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        5428.js
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\5428.js
                                        • Size 144KB
                                        • SHA256 aae6ae8cceb7a67a58f13ca24ac18080f68b76583d2d9f80a3587455ea533af3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        blacklist.js
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\blacklist.js
                                        • Size 76KB
                                        • SHA256 e3e78decce09ec484dd9028a01c14f3cda2681744abb17af695f9561a5e44f16
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        common.js
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\common.js
                                        • Size 2.1MB
                                        • SHA256 5340c156a8608502f0f8cb4dfba427c210d62fb31a29a2b7bdafb9ff3a98ee23
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        favicon_opera_one.png
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\favicon_opera_one.png
                                        • Size 2KB
                                        • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        reader_mode.js
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\reader_mode.js
                                        • Size 112KB
                                        • SHA256 17f8a5c1d70acee668cc6964317d88802d4409c32b0d7e292b95e1de8ddb16df
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        service_worker.js
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\service_worker.js
                                        • Size 92KB
                                        • SHA256 e4a71cc9098780c7cd5ba8a5ebfdf9d3d281a5710ed3b596b6c751d2886cd8eb
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        spotify_frame_interceptor.js
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\spotify_frame_interceptor.js
                                        • Size 5KB
                                        • SHA256 895ef6ae0efde6f5e8af23d1acbfac4a5351bda31c89d2e64c05f2de0181dd56
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        vendors.js
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\vendors.js
                                        • Size 2.1MB
                                        • SHA256 dba9f37ed80e6883cc0157a229108d28e5cf8ded8e486cb799f9a8764afc843d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        messages.json
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\_locales\en\messages.json
                                        • Size 429B
                                        • SHA256 c6a7161359e3c4fbc4059b7209c585f9aa2306c08e6c39a3003f4b29f2ceb22d
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        background.js
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\background.js
                                        • Size 87KB
                                        • SHA256 b199d4f989c63947c53a9d07450038cfe274b7a10e8cc7d688c4049ae14ef63e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        content.js.LICENSE.txt
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\content.js.LICENSE.txt
                                        • Size 1KB
                                        • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        Icon_Light_Active.png
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Active.png
                                        • Size 2KB
                                        • SHA256 97d9553a4f725354a6d5c3eff11f31285fd89c3b150593f04785b83d0a56efc2
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        Icon_Light_Available_Red.png
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Available_Red.png
                                        • Size 2KB
                                        • SHA256 9eccebdbdb61efc0cbd8bccf3a5fedc6f9a1ebe5084b160783f90a56cd1efa7b
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        Icon_Light_Available_Yellow.png
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Available_Yellow.png
                                        • Size 2KB
                                        • SHA256 c165ef60bf3806cd0a7121a8d6cfd06909fc84b38a07d43e809bd7bff564099c
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        Icon_Light_Neutral.png
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Neutral.png
                                        • Size 2KB
                                        • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        Icon_Light_Active.png
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Active.png
                                        • Size 883B
                                        • SHA256 50aa1dcfa9083b57dd6187752b2c149294210be12d263b793d27daf8d431954c
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        Icon_Light_Available_Red.png
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Available_Red.png
                                        • Size 895B
                                        • SHA256 2278e95b28851ade57217ab5c7b32598c44e1085693a3e26379643d29fa0a6d1
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        Icon_Light_Available_Yellow.png
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Available_Yellow.png
                                        • Size 895B
                                        • SHA256 726a50a9c008449ab7bafbf21325bfc72093b7ae6a56c5be90cf8c32a8a44641
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        Icon_Light_Neutral.png
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Neutral.png
                                        • Size 932B
                                        • SHA256 b8e92f9e9b9dc82799231b8d1b57091a9d0bcdd9b54615f86e8c4e4e5c9f036b
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        index.html
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\index.html
                                        • Size 222B
                                        • SHA256 fd21c7ca4637b0221250a14b9fcfb6ebc3b734e659ad80151be4bc579db818f1
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        rules.json
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\rules.json
                                        • Size 839B
                                        • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        MANIFEST-000001
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\https_gxcorner.games_0.indexeddb.leveldb\MANIFEST-000001
                                        • Size 23B
                                        • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        0a12524b-2f27-4627-9023-c78e3aa83fc2.tmp18c07305-1c36-45ad-af84-561e0f54d9d3.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\0a12524b-2f27-4627-9023-c78e3aa83fc2.tmp18c07305-1c36-45ad-af84-561e0f54d9d3.tmp
                                        • Size 27KB
                                        • SHA256 353f070543d1c43247d565c23d4c0346a8d65d902aa7bae04c6ae5e64bc5cde7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        123765d0-81d4-4951-8aed-6bbb26904c85.tmp6fb2f55c-7830-45eb-b486-af6586b01a5e.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\123765d0-81d4-4951-8aed-6bbb26904c85.tmp6fb2f55c-7830-45eb-b486-af6586b01a5e.tmp
                                        • Size 27KB
                                        • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        1f06e292-5c3d-492d-a869-fd537973dbb9.tmpcec1770d-a4d5-4f6b-b9ca-65bf9b5a5acc.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\1f06e292-5c3d-492d-a869-fd537973dbb9.tmpcec1770d-a4d5-4f6b-b9ca-65bf9b5a5acc.tmp
                                        • Size 27KB
                                        • SHA256 06fad05c51b9041e1eee874086a13075af058630a44e160890f8ad6cc52cd6d6
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        6ca1e1b6-a701-45e9-b748-3509fa848af8.tmpf224dc93-7ab1-4dbf-bb3d-3d0037da0b0b.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\6ca1e1b6-a701-45e9-b748-3509fa848af8.tmpf224dc93-7ab1-4dbf-bb3d-3d0037da0b0b.tmp
                                        • Size 27KB
                                        • SHA256 cc914b6c8be70f233d533244b1fe41e32c495b9bb57901a96777f7d19fd75dfa
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        abbd914b-a944-49a7-80b9-bd701c5867e4.tmp7460e5b3-c25d-4f62-aeb9-2a7ea98982dd.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\abbd914b-a944-49a7-80b9-bd701c5867e4.tmp7460e5b3-c25d-4f62-aeb9-2a7ea98982dd.tmp
                                        • Size 27KB
                                        • SHA256 b79b047aa13202f575c92b513e67530ee9a5de4755d8d67c85c2f156c9a4eb39
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        ea623fe3-3dd9-4f20-a996-e90e965edf01.tmp5c998774-f7c4-4bf8-b924-79bfc4a8cffe.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\ea623fe3-3dd9-4f20-a996-e90e965edf01.tmp5c998774-f7c4-4bf8-b924-79bfc4a8cffe.tmp
                                        • Size 27KB
                                        • SHA256 2f1a860dec73e59307d1a8e1b1ace276076ef77008f468720569bfc8d7ba2512
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        MANIFEST-000001
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Local Storage\leveldb\MANIFEST-000001
                                        • Size 41B
                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        Network Persistent State
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State
                                        • Size 59B
                                        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        Network Persistent Statec488e258-0f1c-449a-81ae-7c0043505e10.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent Statec488e258-0f1c-449a-81ae-7c0043505e10.tmp
                                        • Size 3KB
                                        • SHA256 3270f820b8ba6595d0f32a73ef317c8e6fe9e52bef01810609eda2c14d4a0e50
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        SCT Auditing Pending Reports
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\SCT Auditing Pending Reports
                                        • Size 2B
                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        Opera Custom Icon.icod98185a1-7654-45ce-b353-9193591b84ce.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Opera Custom Icon.icod98185a1-7654-45ce-b353-9193591b84ce.tmp
                                        • Size 162KB
                                        • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        Preferences
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                        • Size 12KB
                                        • SHA256 42f22f0ad1ed38134ee5453eb90cf1b8a5897467c9563be5801414c6c225763f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        Preferences20e81331-0349-480f-9963-4af1796fa3ad.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences20e81331-0349-480f-9963-4af1796fa3ad.tmp
                                        • Size 13KB
                                        • SHA256 7f758e4853078374c4ffaf58bce56a01649729efb27cfd4625e173999b04e232
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        Preferences92d2354d-44de-4b59-a7e9-aa05e24c6d4d.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences92d2354d-44de-4b59-a7e9-aa05e24c6d4d.tmp
                                        • Size 13KB
                                        • SHA256 22efb57a8b35993d052b0aac51f65ef90ce314292fe6901c56bcc50bd8411166
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        Secure Preferences
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
                                        • Size 80KB
                                        • SHA256 c999463298a6d2bfbc2bf4a377c112236488e5edd43bf65c3a400f18c01e2c5d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        Secure Preferences02dc6542-8f8b-4900-904c-b0bf5638facf.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences02dc6542-8f8b-4900-904c-b0bf5638facf.tmp
                                        • Size 119KB
                                        • SHA256 8ebb6ff472b6f1174304af0c56fda35406eee04e211cc236196538e5c02a39da
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        index
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index
                                        • Size 24B
                                        • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        temp-index
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                        • Size 552B
                                        • SHA256 4caaaa9806a47d7b8e689a3757397d3bb82775d2cc9f777097530b874f47d056
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        the-real-index
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                        • Size 72B
                                        • SHA256 b6c9a960185970c8fb734fb075b478076d066eed4a413904951a85c340c148b2
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw
                                        • Size 429B
                                        • SHA256 3607c642f13e6cd1185b4451423dc76ab679c41847424746611b6ac3110d4a44
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw
                                        • Size 9KB
                                        • SHA256 c085b17058b91efac36a7b1e923d411f49af23fc241bcdb07fad6d6275f3a6fb
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw
                                        • Size 11KB
                                        • SHA256 74fa627e640fbaef8ec2d71a15630976f9f5d5bfaaec9ef23a576477924b8d3a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw0007f9e1-1d7b-4dc0-b2d8-2e8661fad094.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw0007f9e1-1d7b-4dc0-b2d8-2e8661fad094.tmp
                                        • Size 12KB
                                        • SHA256 cc72ed35c478d332448a81e043a3210f170d96af21b1c9c668030476e0930633
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw00f99c87-5bb1-437a-a5c3-fedcc3108ae9.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw00f99c87-5bb1-437a-a5c3-fedcc3108ae9.tmp
                                        • Size 12KB
                                        • SHA256 8bf6ff53d26c939bd355d294a41ec043086d8a3170bcfdf9941094093e4ff001
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw025a6186-c1fc-45ec-83ee-4b94ed385c72.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw025a6186-c1fc-45ec-83ee-4b94ed385c72.tmp
                                        • Size 9KB
                                        • SHA256 82ec5ad22a64ca42910c0a612f14bdafd92e5d755d891dc9f9660e34c9c03284
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw04197c6e-1fa2-4141-a544-e725c6a967ac.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw04197c6e-1fa2-4141-a544-e725c6a967ac.tmp
                                        • Size 10KB
                                        • SHA256 6376a98ca7f70a17cdea36f46f8075e57c98d0f349d2c70290b5af1e70f846c3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw051ca8c0-9894-4ea0-8c1a-cffe7eb4cab5.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw051ca8c0-9894-4ea0-8c1a-cffe7eb4cab5.tmp
                                        • Size 2KB
                                        • SHA256 77968a07afab347fdc246885ed3ff62ee1a0a48bbd1b05afddc44c68bfb61b8f
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw058b81eb-4035-4be2-8130-a012c4346a68.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw058b81eb-4035-4be2-8130-a012c4346a68.tmp
                                        • Size 2KB
                                        • SHA256 d897acb6a27c7f6f94d62caa92afc186c80447d3f107b96efa083dddba884dce
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw0b77169c-c7bd-4f38-932e-632439b92142.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw0b77169c-c7bd-4f38-932e-632439b92142.tmp
                                        • Size 9KB
                                        • SHA256 33b01bd0aa3606b596d3231adb1e284732b28dff22295f0f8eb0f6e445a1758d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw154ebfec-1425-4805-bba1-733cedd8daaa.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw154ebfec-1425-4805-bba1-733cedd8daaa.tmp
                                        • Size 2KB
                                        • SHA256 4d82ec2a50d4e32f4dd7435a9caa2575515b4e26b97d9a6c698a3d4051c27d2d
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw1bdc7455-f5af-491c-b59d-a0f17dcb1bf5.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw1bdc7455-f5af-491c-b59d-a0f17dcb1bf5.tmp
                                        • Size 9KB
                                        • SHA256 722017ce5f456ca6415ad2678dcfed62beb494ca636b899ea1010a57717c7cf7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw1eeffba9-8998-413d-a01e-5ca02f3bd719.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw1eeffba9-8998-413d-a01e-5ca02f3bd719.tmp
                                        • Size 9KB
                                        • SHA256 974296c62105e862eb708c1fa0f9da9a93a4704c4b4bbb75aac5eab0278c2746
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw2007657f-b6ef-48a9-81eb-cd68d1bbdd2b.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw2007657f-b6ef-48a9-81eb-cd68d1bbdd2b.tmp
                                        • Size 11KB
                                        • SHA256 331eba7c395b7aaf8c6838c3fa88fe6c857e735baef085f9c81de80ef5058968
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw2067f789-78e5-459a-a4c6-7f5d3f631388.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw2067f789-78e5-459a-a4c6-7f5d3f631388.tmp
                                        • Size 2KB
                                        • SHA256 716d5cbbc6c2b0d4e6ec7caa6994b270784a10887463b561ff78232f212ec8d5
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw20876f94-8589-43d7-be97-ec95c24d9ab2.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw20876f94-8589-43d7-be97-ec95c24d9ab2.tmp
                                        • Size 10KB
                                        • SHA256 56c626c18547fc6a2cffcba186ddbf132e27cefd1c69b09447b3717b4bd54eb5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw2164cc69-f363-467f-8455-8700cc9fb4c2.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw2164cc69-f363-467f-8455-8700cc9fb4c2.tmp
                                        • Size 11KB
                                        • SHA256 fc8cd9b29aa39b929ce5da263b41bb7435a7e01491e9f305ed36a95c1a9a471b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw217f5ecb-8810-4d85-8e32-2f96bd2018a2.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw217f5ecb-8810-4d85-8e32-2f96bd2018a2.tmp
                                        • Size 9KB
                                        • SHA256 751d653db0da422ab5130a6af4db26b8dbcdbb92c7652e6613913704b3b6f29a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw2480ac1e-96a0-4bfe-9eae-3f09aced93eb.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw2480ac1e-96a0-4bfe-9eae-3f09aced93eb.tmp
                                        • Size 8KB
                                        • SHA256 6fae27ffbfc9b2aa5780d92199bd73f729f5e607f0a6b436cf8ef9da74ddbe3b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw29c7664b-8bee-4dae-a0f9-27b765b54642.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw29c7664b-8bee-4dae-a0f9-27b765b54642.tmp
                                        • Size 3KB
                                        • SHA256 ad0ad81db9e7c538278477fbf4260df85eb0c7c8a6dbc1e6fd1270114d1bd498
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw31fbd610-2fa6-4410-8072-b7a82b6aff69.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw31fbd610-2fa6-4410-8072-b7a82b6aff69.tmp
                                        • Size 11KB
                                        • SHA256 eec9ba7a7749a2f9f12eba579b554bd33648f0782786a040b3d93c58bcfe8eaf
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw3f5ea6a1-7081-4960-8bae-d1ee4f02c60a.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw3f5ea6a1-7081-4960-8bae-d1ee4f02c60a.tmp
                                        • Size 10KB
                                        • SHA256 9acd90f0ff21b23cbd9dcf35722f6e4d3e3450fb5a1a6698c011b47843a9307c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw4219458c-7513-4ae9-978f-c49786b777e2.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw4219458c-7513-4ae9-978f-c49786b777e2.tmp
                                        • Size 8KB
                                        • SHA256 d42a07410a591acbb190d41202a8476975bff5c899f6d0c122a6b72fe3026009
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw4635fc82-60e9-4665-b4b5-f2e1e3f130c9.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw4635fc82-60e9-4665-b4b5-f2e1e3f130c9.tmp
                                        • Size 12KB
                                        • SHA256 f64e535b6d344bdca62744cb377489d55b28784607900c53a5f52d94573d5e4f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw471a1638-5a9b-4fe7-a9f9-874fcc0f9426.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw471a1638-5a9b-4fe7-a9f9-874fcc0f9426.tmp
                                        • Size 10KB
                                        • SHA256 4b62845e9a21d799a28c34b6663d1379b36ac9d75fc5864526ce379c3370a1b1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw495682ba-7394-4f13-af8a-3f8a7194d20d.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw495682ba-7394-4f13-af8a-3f8a7194d20d.tmp
                                        • Size 9KB
                                        • SHA256 35f2efb6f8ef79e928329db75ffda812b6f0acd30a49eaa7e1f12ea921c4810b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw4c1cba31-8f42-42a9-bcb2-82fa7d07e310.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw4c1cba31-8f42-42a9-bcb2-82fa7d07e310.tmp
                                        • Size 12KB
                                        • SHA256 65cca0b75ccce2d03ef9121afdb1d35b06d9d0d420a08f599e81c498e786f5e4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw519e2f0f-fbd6-4df7-9a3b-d12bb3f82aeb.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw519e2f0f-fbd6-4df7-9a3b-d12bb3f82aeb.tmp
                                        • Size 541B
                                        • SHA256 ac0c88c84b8c0f69eaf3cb06a24f7474ab7345b802cacacbd9821e395ae433d3
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw539a398f-2a62-413d-88a2-f6f2879cf98b.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw539a398f-2a62-413d-88a2-f6f2879cf98b.tmp
                                        • Size 11KB
                                        • SHA256 055bbe20bc57c3bbb82c3ca2345e9a848a88958c247de575338c7ead594ce2ac
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw57edb3c7-d862-48cc-bde7-2a0234a378e1.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw57edb3c7-d862-48cc-bde7-2a0234a378e1.tmp
                                        • Size 12KB
                                        • SHA256 9d06844167f817e3d8c381aa9a9a0508b0de046eeb110a6519f78c4a41f02487
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw5990af21-277c-414d-ac8d-a56c0c5c5087.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw5990af21-277c-414d-ac8d-a56c0c5c5087.tmp
                                        • Size 1KB
                                        • SHA256 d7bc9187708c94413be156dd84509e7c565c118819974cfdef0df4e5292b3878
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw60a5b425-6d83-49ca-b411-e4f8bf93d333.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw60a5b425-6d83-49ca-b411-e4f8bf93d333.tmp
                                        • Size 9KB
                                        • SHA256 15c9d37b718b6d7ccebf8a4d16494561ceaaea22382c97d40c0490958271f288
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw61cfdc12-1d9f-4ff2-8521-e7cd5846de72.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw61cfdc12-1d9f-4ff2-8521-e7cd5846de72.tmp
                                        • Size 10KB
                                        • SHA256 868e52be74063aadb2010d6172ec9c8652b9d37439de257755d0ff0954ddd186
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw66a28446-817a-4a80-ac02-27bdb0c5ec93.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw66a28446-817a-4a80-ac02-27bdb0c5ec93.tmp
                                        • Size 13KB
                                        • SHA256 a50df66c4655155cb4930cbfbd79c3bdc3c0060b37d86401fecfb59a432dee75
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw6740b702-eacf-447a-9e2d-5b0f77b68bd4.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw6740b702-eacf-447a-9e2d-5b0f77b68bd4.tmp
                                        • Size 8KB
                                        • SHA256 db674b174cb627a4f02ada793f552f3383a663e44e599e60c2b2c2dd486453e9
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw67e048ef-436e-481c-a1d2-8d1046d47d35.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw67e048ef-436e-481c-a1d2-8d1046d47d35.tmp
                                        • Size 8KB
                                        • SHA256 0b0d1482cf4fc5cc885fd1e97b09974e543e09c6beab099899c50df1d1947669
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw6a289c6e-e96c-48bb-bf24-a3aa2e16556c.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw6a289c6e-e96c-48bb-bf24-a3aa2e16556c.tmp
                                        • Size 12KB
                                        • SHA256 279a4407cda55c71e355ed7b6684a778bcf5558e03fe4f928bdefd6cfa66b0e1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw6a6a5293-332f-48c5-8218-e1db0b5f8b4b.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw6a6a5293-332f-48c5-8218-e1db0b5f8b4b.tmp
                                        • Size 11KB
                                        • SHA256 9008e8dbbf22fb2094125c9467eb22ac8b286dca43eff50291251c54cd25b5a8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw6db46ae1-29bc-4ed8-8c75-57c299844778.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw6db46ae1-29bc-4ed8-8c75-57c299844778.tmp
                                        • Size 10KB
                                        • SHA256 4ca7f2a688b3c3de1dda5f77384fbf1813f32fa9f97b038b2392bb655cf41624
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw717aa266-42f0-4982-8cdb-e1c3bfafacbe.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw717aa266-42f0-4982-8cdb-e1c3bfafacbe.tmp
                                        • Size 13KB
                                        • SHA256 e19a8b237a89ab37549dd87b8739867db9eae2632d1334bd4f0e5c2fdceff288
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw745b9858-6845-40cf-be65-8a3c5ce8abf0.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw745b9858-6845-40cf-be65-8a3c5ce8abf0.tmp
                                        • Size 13KB
                                        • SHA256 f662c5f2f5bbd330cd667d32fbca37df24822b1b000d25a4cfba1fae1caa784e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw7704d57d-14d0-49b8-aa3d-404241d213c5.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw7704d57d-14d0-49b8-aa3d-404241d213c5.tmp
                                        • Size 11KB
                                        • SHA256 38972733c6843f81b2e6b5b6e53f827bfbc4a989ea360c9b4208469baf03b412
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw7a38e093-fcb2-489c-a3fd-85f2af7d38fe.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw7a38e093-fcb2-489c-a3fd-85f2af7d38fe.tmp
                                        • Size 12KB
                                        • SHA256 81de8eae07a6b851f31ad9ac8b2a84ac01cb438d86fa2c073964b96b8f081052
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw7ea1e594-f3c6-424e-b0e3-86761b8a8b62.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw7ea1e594-f3c6-424e-b0e3-86761b8a8b62.tmp
                                        • Size 797B
                                        • SHA256 77db3f7a738031d8fa5caa33be9b18f2902f16cfac1508bfc4000dbcac6aa517
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw860e73fa-fd36-4b93-8c00-bfca2288c7a8.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw860e73fa-fd36-4b93-8c00-bfca2288c7a8.tmp
                                        • Size 9KB
                                        • SHA256 15ccda6180b8bae4dd10e71910f05c4f181ae474066a07b6b671cff88c90ed83
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw87e0df8c-003b-4cd0-b16b-bb036b72374b.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw87e0df8c-003b-4cd0-b16b-bb036b72374b.tmp
                                        • Size 9KB
                                        • SHA256 675eae756ac3ac1e95e98f081c766f0ebb55df952b5ff6d4ce1400d8fb9ae5ba
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw8d07ccb3-f32f-4b4f-8d28-7213f293ca0a.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw8d07ccb3-f32f-4b4f-8d28-7213f293ca0a.tmp
                                        • Size 9KB
                                        • SHA256 ab07c83f4b6f662a35fd53f2bad4aba32d03e77328ad5b63f5653825d494da0c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw9105f15e-7c2c-4036-9b9a-7c59d09ca533.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw9105f15e-7c2c-4036-9b9a-7c59d09ca533.tmp
                                        • Size 669B
                                        • SHA256 c142413781b873ec15b9377d016a8957fa48cc0278ddc286db6b1bc8dc5729fb
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw93e19186-3651-475d-a141-b4db68cddf47.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw93e19186-3651-475d-a141-b4db68cddf47.tmp
                                        • Size 1KB
                                        • SHA256 3ccc88995749c01169fb90762363295301246cb5332c2abd1c020ff9ad17f455
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw9cd779c6-323b-4561-be21-ea2b8fe73a46.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw9cd779c6-323b-4561-be21-ea2b8fe73a46.tmp
                                        • Size 1KB
                                        • SHA256 44a6f7134df6ef032b8cd71ee6ad5227c8f3997389d9cbd0c003ab1779fc9b92
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw9fe1cd93-ea91-4770-86fa-f8721adba86f.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raw9fe1cd93-ea91-4770-86fa-f8721adba86f.tmp
                                        • Size 2KB
                                        • SHA256 c2838a5a51a6f052cd3e2496d20cb638a5f8726af0ea5f869ed0498d6c788cec
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawa09e3cbb-b7b1-4067-bc7d-887f21f7477d.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawa09e3cbb-b7b1-4067-bc7d-887f21f7477d.tmp
                                        • Size 11KB
                                        • SHA256 e21e38185ec02fe31ed1d7dceb71911bd273baf1d0f7f156c9585992d9d82071
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawa2225d7e-d33d-4d32-9eec-f2b28a5f1042.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawa2225d7e-d33d-4d32-9eec-f2b28a5f1042.tmp
                                        • Size 9KB
                                        • SHA256 79606d0d73488261e78933c0bf64e9b3a75cd676282b042df5d018e9333a312c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawa94a417e-dc15-42bc-a2a5-6aa36835cc8d.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawa94a417e-dc15-42bc-a2a5-6aa36835cc8d.tmp
                                        • Size 2KB
                                        • SHA256 f7028658fc3921288974ef87e9709ee40669440762d75d2b448d27c62441f184
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawac5e7594-0912-4b6a-873a-a3c453295317.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawac5e7594-0912-4b6a-873a-a3c453295317.tmp
                                        • Size 3KB
                                        • SHA256 19e6ee4f27e31de074066c63e7dc86cb9910d429720b05bd93a26a525316a0ae
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawb96b1769-b427-4a31-afd7-5af2755f2502.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawb96b1769-b427-4a31-afd7-5af2755f2502.tmp
                                        • Size 11KB
                                        • SHA256 1a82539d4b485b6ddf01058ef09ad33fee80691d6e12a20737c8384c82d96fa4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawbac70b99-c19b-4923-8b71-911cf76378bf.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawbac70b99-c19b-4923-8b71-911cf76378bf.tmp
                                        • Size 12KB
                                        • SHA256 7d9b8291133e5e6f68069317dc60ee6a6d60010575e284949284e6ca1ceb2e59
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawbe896f57-484e-400d-846e-d9042f19bd4d.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawbe896f57-484e-400d-846e-d9042f19bd4d.tmp
                                        • Size 12KB
                                        • SHA256 409d28a1665372db5f11e086e0a98f98912313645d7fb7f2a24924e99b9270cd
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawc05708b6-3e8a-4951-854d-50056a728c2d.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawc05708b6-3e8a-4951-854d-50056a728c2d.tmp
                                        • Size 9KB
                                        • SHA256 cf605e4eb16c12643b2b2a89210026d7f297c48683a8f2287c09f4b282bfb5c4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawc483cf86-2b0a-4686-a682-2e96dccd0337.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawc483cf86-2b0a-4686-a682-2e96dccd0337.tmp
                                        • Size 9KB
                                        • SHA256 f43e19780ff4e33d853b5d4aad3eb4a967c0ff7cadb7421c6477f0d1a6bbe875
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawc723b6a0-c886-4d24-8558-e01a3f45262e.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawc723b6a0-c886-4d24-8558-e01a3f45262e.tmp
                                        • Size 12KB
                                        • SHA256 562dd41d24759ecd677262dd07f8b235fa10a50b0fe2f08b975f98a26b8d32b3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawcb0082e9-8d5c-4eda-9ea2-5fc5e5ec5e23.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawcb0082e9-8d5c-4eda-9ea2-5fc5e5ec5e23.tmp
                                        • Size 9KB
                                        • SHA256 57fefed8f538a0c59dc564a7ea443d849a8f2e9e6ed4caee024aa88a726b3646
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawd00bbd95-bda8-48c8-b695-047cf9a1b215.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawd00bbd95-bda8-48c8-b695-047cf9a1b215.tmp
                                        • Size 3KB
                                        • SHA256 7e3d03d614810195e92918b0cc8b349cab16319f61f0a7dad35ddc6fbee605e5
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawd69e267d-1ce2-4b02-b24a-fd1e29c4b379.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawd69e267d-1ce2-4b02-b24a-fd1e29c4b379.tmp
                                        • Size 10KB
                                        • SHA256 34a4a6d74d2e4fa7526f0771d79f7060664cf736d052af67b173202d05c60668
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawdf7ebe8f-b77d-4d51-84d4-42eaafcdc1be.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawdf7ebe8f-b77d-4d51-84d4-42eaafcdc1be.tmp
                                        • Size 2KB
                                        • SHA256 ff14c01245d1c62ff918c23dcf5b578a714796fae3bdf48b9c749e645bad28ae
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawe24de98a-23db-4849-9c7d-77750356317a.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawe24de98a-23db-4849-9c7d-77750356317a.tmp
                                        • Size 12KB
                                        • SHA256 6b90d45246b1d20ab8cf8ed6d1d4a5149867bb806cffab240f26ba2dc9db01c6
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawe5370a87-d109-415d-8ae4-727010f3bc2f.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawe5370a87-d109-415d-8ae4-727010f3bc2f.tmp
                                        • Size 12KB
                                        • SHA256 13718f64fc165e63f86cd6f3a623ac30148657e22ebccaa361d0723052e97a88
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawe671d7a7-e932-4f4c-ba64-f9f3243619ad.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawe671d7a7-e932-4f4c-ba64-f9f3243619ad.tmp
                                        • Size 1KB
                                        • SHA256 2be77f02f896d01e1bf2624f07057cb11feccda20f113a85a8d974a1e81cb38b
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raweebce1b0-c1ba-4961-8f86-cc4a414f6bc8.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raweebce1b0-c1ba-4961-8f86-cc4a414f6bc8.tmp
                                        • Size 9KB
                                        • SHA256 38f3295cc15d958046094289e02ac89e29867f014fbf0dda59cbbf5440a2338f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raweef91021-2d0f-4232-b88b-90982f226389.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.raweef91021-2d0f-4232-b88b-90982f226389.tmp
                                        • Size 1KB
                                        • SHA256 9f88d48b9cd70e7259cebe08abc4d9bb6a5f04e9abc406fae1223717c1142379
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawef408abe-3ba0-49f8-bb74-9f12f8a8189a.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawef408abe-3ba0-49f8-bb74-9f12f8a8189a.tmp
                                        • Size 8KB
                                        • SHA256 9e2c591a2c15e8aa170d7cdd3fd7e5a11f6ee60d20864dd7e17ebf8fd1c07e67
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawefd1cca1-b293-4d82-8e98-25aae436f21a.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawefd1cca1-b293-4d82-8e98-25aae436f21a.tmp
                                        • Size 973B
                                        • SHA256 8056bd8d7b2ac21121037f4ca1d67d5bd71464f988c2a22fa01bbfc97c407d71
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawf305cdcb-8338-4b29-9bb1-f49a0b59fe72.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawf305cdcb-8338-4b29-9bb1-f49a0b59fe72.tmp
                                        • Size 10KB
                                        • SHA256 c3d56cd2fa68d9d715be8addd51e3eb6b7b8265cc480cc2e1ccb4a64e2ff1682
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawf38af348-a4f5-4875-b76f-09c9a516aac4.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawf38af348-a4f5-4875-b76f-09c9a516aac4.tmp
                                        • Size 1KB
                                        • SHA256 cbff45ca3c248012997602046bcbf1d2309940af848b36d8462d7954d3f003e2
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawf71dd419-4635-4976-9e80-095b9ecedda6.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawf71dd419-4635-4976-9e80-095b9ecedda6.tmp
                                        • Size 9KB
                                        • SHA256 23b7ce43bfe0e5882dba4a01de9ba5dfa81b5cc4338bc9d08392206ef8d19862
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawfa8bf5f0-07d9-4283-9019-aef8a414323b.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawfa8bf5f0-07d9-4283-9019-aef8a414323b.tmp
                                        • Size 3KB
                                        • SHA256 d84e6889837cd4e3d8bd121fd27b260783b2c872901d6a4435e76d4dd4a25ff4
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawfbf5c622-bdcf-41f7-920b-4733c13d2ae4.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c312d74f-8e9c-49bd-9416-b8ff891a6f3d.rawfbf5c622-bdcf-41f7-920b-4733c13d2ae4.tmp
                                        • Size 2KB
                                        • SHA256 af4aea163d753c6f5304f19afa8178bc8b66fff6c5a9977ea19f500015a23dcf
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        CURRENT
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Sync Data\LevelDB\CURRENT
                                        • Size 16B
                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        daily_wallpapers.json
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\daily_wallpapers.json
                                        • Size 4KB
                                        • SHA256 7fdd2937785f48c5518e4cccf5027096f1378046a5cb4e7443819cd6bd2f398b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        rhs.dat
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\rhs.dat
                                        • Size 107KB
                                        • SHA256 d6e199b269c1a040ff9d9b2055ccb3b673b2d1525e447d3ac441ad188830de84
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        spotlight_campaigns.json
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\spotlight_campaigns.json
                                        • Size 1KB
                                        • SHA256 707366f53ae81bd28cb79401ff9a455a9c602001587f5ba8f233e14f09d86668
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.0.809685413
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.0.809685413
                                        • Size 357B
                                        • SHA256 8c73f96c1934fbea311ee34a822f4e3a4159f8b05c3c85fbc318a0bc335cc647
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.0.8096854131af1a8ad-a96e-4d75-a61e-f6f1b9eda62f.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.0.8096854131af1a8ad-a96e-4d75-a61e-f6f1b9eda62f.tmp
                                        • Size 2KB
                                        • SHA256 557a905d59953e4dcd730c850449b429d77afbb4ecee6c42287024c315dd7514
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.0.80968541337951c53-d7e3-4e74-8261-d32b4c4d5ac8.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.0.80968541337951c53-d7e3-4e74-8261-d32b4c4d5ac8.tmp
                                        • Size 2KB
                                        • SHA256 450edfa8aee0f4df88aa70758efe258c22a8b6b8d76fcc7b233b91f9e7b66c06
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.0.8096854134d8fa370-6489-4fcf-b962-02b5e43fd7ce.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.0.8096854134d8fa370-6489-4fcf-b962-02b5e43fd7ce.tmp
                                        • Size 2KB
                                        • SHA256 d5dbaf489bb0b1a46d332d499d8ae615c5bd87843fd046b47c4efc8b21923fa4
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.0.80968541356c7a8d2-6802-4eb8-92fc-505a6e6861b7.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.0.80968541356c7a8d2-6802-4eb8-92fc-505a6e6861b7.tmp
                                        • Size 2KB
                                        • SHA256 894858fd2a0c20a495264c50ba677f8072ef437942480477ef41fd2f06250373
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.0.809685413644029c6-b4cc-4de8-895c-bb2a04884271.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.0.809685413644029c6-b4cc-4de8-895c-bb2a04884271.tmp
                                        • Size 457B
                                        • SHA256 7945ab20093bab72889e6e304dba5d758ef6f55b9e149976694fc9206eac5971
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.0.80968541369342fe9-e5d5-404a-8390-326a17922791.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.0.80968541369342fe9-e5d5-404a-8390-326a17922791.tmp
                                        • Size 2KB
                                        • SHA256 e2dce5cf380d3eae72dadd46b218f9db01d2b22f80d958e2864ed4675e9e5340
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.0.8096854138583185f-1bc8-4716-9eee-3d44ca0d8d7b.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.0.8096854138583185f-1bc8-4716-9eee-3d44ca0d8d7b.tmp
                                        • Size 1KB
                                        • SHA256 075dda644d5bee640777ff89ea386413a070fe54f20cdd301c38eb17cad177d2
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.0.80968541385c16583-c895-4221-84b4-31b6682f248f.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.0.80968541385c16583-c895-4221-84b4-31b6682f248f.tmp
                                        • Size 2KB
                                        • SHA256 5467d0683f227e41f97c9b52ad88870f195ab5ab2dad3136138edbd943c2925b
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.0.8096854138e1a67be-2f11-4c5e-802d-cee7440b02ba.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.0.8096854138e1a67be-2f11-4c5e-802d-cee7440b02ba.tmp
                                        • Size 2KB
                                        • SHA256 bdde2649a9c6e7511305d1aa990521ef4259df15f9293fc1dad5e44c9de8ba83
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.0.809685413941f4c3c-80f3-4d1d-8d47-9a10465599c8.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.0.809685413941f4c3c-80f3-4d1d-8d47-9a10465599c8.tmp
                                        • Size 617B
                                        • SHA256 7df9f36a05f19be08fb13dbf1610c657cf24225cbf66f1a573dccbe5cb477973
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.0.809685413c1b2b314-29f7-42be-948c-104af1dc162a.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.0.809685413c1b2b314-29f7-42be-948c-104af1dc162a.tmp
                                        • Size 555B
                                        • SHA256 a16415394ab2b037783e878d19565a17a5a0deaa91f8d068cbfd2881d6638a2b
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.0.809685413d4594335-39cb-4507-a8dc-56441d6d6258.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.0.809685413d4594335-39cb-4507-a8dc-56441d6d6258.tmp
                                        • Size 2KB
                                        • SHA256 40ca4cf9860706bed440a40a5aea270f6bd6d0c543c967869f843fe2f351bee9
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.1.1029985729
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.1.1029985729
                                        • Size 171B
                                        • SHA256 42b8d697e4e1c5d00e8f4c252a810fbc04b3b0499173e9e2d6c6135ed900ce87
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.1.10299857290db18b98-f1c1-43c8-8e35-2231a7c58d36.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.1.10299857290db18b98-f1c1-43c8-8e35-2231a7c58d36.tmp
                                        • Size 510B
                                        • SHA256 725fecc151225edb2bc653a0cb4e9b3d62cad4925f5f5cfcd7d7175768186571
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.1.10299857291b5fe2a7-84b1-4e88-9fc3-d6a6fabb9552.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.1.10299857291b5fe2a7-84b1-4e88-9fc3-d6a6fabb9552.tmp
                                        • Size 1KB
                                        • SHA256 6c288c1521aa5872767255429e989e04606ace366557de4eb769e33c50227a5b
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.1.102998572927d4d44f-535b-47a6-bf18-bd462d03a86d.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.1.102998572927d4d44f-535b-47a6-bf18-bd462d03a86d.tmp
                                        • Size 1KB
                                        • SHA256 3650b22b0d26cac1922cbca02a65616fb43e3bfb12f12d5dc2dc09013b294563
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.1.102998572930ab25c0-5334-4b3a-95a6-d4ce6e6a5e56.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.1.102998572930ab25c0-5334-4b3a-95a6-d4ce6e6a5e56.tmp
                                        • Size 1KB
                                        • SHA256 1781d8eca7795276224628d13b8ba9b53df49a345c33df3e4547e85d3e594542
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.1.102998572937a8db74-74ae-4bb5-bf9e-3e7bb1182d8d.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.1.102998572937a8db74-74ae-4bb5-bf9e-3e7bb1182d8d.tmp
                                        • Size 912B
                                        • SHA256 9c913c3f5c8550812927c71731ced52760b79b8ae56ed8d01e2c22b6f95df170
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.1.102998572947c9e2b9-2312-4643-b4df-d75a3dfb6db2.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.1.102998572947c9e2b9-2312-4643-b4df-d75a3dfb6db2.tmp
                                        • Size 603B
                                        • SHA256 a6fa1e0d08ca20a5d6634a7dae3401f381d4f1aa7b517426deea49bf9d001a95
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.1.102998572947ca9ad7-a762-4c9f-aa8a-33e69e8fb82d.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.1.102998572947ca9ad7-a762-4c9f-aa8a-33e69e8fb82d.tmp
                                        • Size 1KB
                                        • SHA256 c2c46355717c67e07ee828c90bc2bceb161660f9aebb0ebdcdce7c21ee2554e3
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.1.102998572954667853-5196-4cfd-826f-c4d6195bfb7d.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.1.102998572954667853-5196-4cfd-826f-c4d6195bfb7d.tmp
                                        • Size 1KB
                                        • SHA256 faf61bcc0b2863e2bbd1777338db54c1837ba7fa08de9b43920e43f24b1fe620
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.1.10299857295c13fd7e-c47e-4223-b189-ee01f2f07ba1.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.1.10299857295c13fd7e-c47e-4223-b189-ee01f2f07ba1.tmp
                                        • Size 1KB
                                        • SHA256 29b4881398e1b38acb3cd41e996ad8f2c6a6b21c7c7be8577eff3785593b3e6b
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.1.1029985729707b0904-7078-4acc-a8ce-e78e602e9e1f.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.1.1029985729707b0904-7078-4acc-a8ce-e78e602e9e1f.tmp
                                        • Size 692B
                                        • SHA256 e09a93e3181dd6f4bf3874fbe74616e542ba193a09ffee703c5d6056bbd6b265
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.1.102998572987102235-c859-41ea-a7ca-a3192e39810e.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.1.102998572987102235-c859-41ea-a7ca-a3192e39810e.tmp
                                        • Size 1004B
                                        • SHA256 613f53666785e86c484188e1bed279314fbf21b5aaaeae598a8389070a534f11
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.1.1029985729a5368f51-6fbb-4a4e-9691-de1ee8e24077.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.1.1029985729a5368f51-6fbb-4a4e-9691-de1ee8e24077.tmp
                                        • Size 1KB
                                        • SHA256 ac0c1d3aedbc761a0a2e3eab2c803ef7fc3a68103b5921d05d28afabc002e8dd
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.1.1029985729b8ab598a-a8e8-4dbe-bdd0-a53744c33d6b.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.1.1029985729b8ab598a-a8e8-4dbe-bdd0-a53744c33d6b.tmp
                                        • Size 418B
                                        • SHA256 9f20a3d1f8fa2fbdba0aeab96a3a7a6d7cd6795130fa2301128fc8780592b700
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.1.1029985729d2ef3648-ddb8-48a1-95f0-e846e19075a3.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.1.1029985729d2ef3648-ddb8-48a1-95f0-e846e19075a3.tmp
                                        • Size 200B
                                        • SHA256 02ec4005d70d79089dc2848d8e98fc7e0e2cf85d85b1c725744ff426f3810f1c
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.1.1029985729ed3d634f-776a-41c3-af59-ca2cbf78cf54.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.1.1029985729ed3d634f-776a-41c3-af59-ca2cbf78cf54.tmp
                                        • Size 325B
                                        • SHA256 1504a90876c58be0286fc53611b8b3ce2373c7295b1abe0a6328f63641059447
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.1.1029985729f2eb850d-d6ef-4c67-bf8e-f882aa2ab5de.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.1.1029985729f2eb850d-d6ef-4c67-bf8e-f882aa2ab5de.tmp
                                        • Size 1KB
                                        • SHA256 444cd771cc99ee735266bdcfaaf9dc61485d749823c3d83e8a2ecde96f18d242
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp4404.1.1029985729f61cf4cc-a850-404f-ab2a-56aa2b5a27e4.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4404.1.1029985729f61cf4cc-a850-404f-ab2a-56aa2b5a27e4.tmp
                                        • Size 783B
                                        • SHA256 be5b0098a492e915e87769a52022691b8b60f2080de8127a72c1435d3503910c
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        suggestions_cache.json78adb9a5-cc0b-4358-8aa5-9c1d683bf84d.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\suggestions_cache.json78adb9a5-cc0b-4358-8aa5-9c1d683bf84d.tmp
                                        • Size 852KB
                                        • SHA256 2c6d005bd81a7d688eba88de0c9e2a0f84e4eb36ec6a5c795a01ca6e330983cd
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        Local State
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                        • Size 3KB
                                        • SHA256 e5e6cd44e6ff0de0b5afbdf3f75dc4390788dae5d4b47f0ed11f72171954fdfd
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        Local Statedc40d7d7-b9b2-4ff8-9170-78f12337b486.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local Statedc40d7d7-b9b2-4ff8-9170-78f12337b486.tmp
                                        • Size 4KB
                                        • SHA256 4b06127c3ba988b2ecda0d4804feb2803610f584907e77b83036cc84bc2ed591
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        VariationsSafeSeedV2605b0a4f-6d63-4f00-812a-e10858b3398c.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\VariationsSafeSeedV2605b0a4f-6d63-4f00-812a-e10858b3398c.tmp
                                        • Size 19B
                                        • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        VariationsSeedV265561744-19da-4340-9927-96e7f35daac3.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\VariationsSeedV265561744-19da-4340-9927-96e7f35daac3.tmp
                                        • Size 11B
                                        • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        clipboard_injection_guard_rules.json
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\clipboard_injection_guard_rules.json
                                        • Size 6KB
                                        • SHA256 b8d84b82da3d90323de6cf1b4e3594bf7acb99101c72379b10f4b982f82bd487
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        metadata.jsonee4c3104-6823-4f7b-9bef-b4b4340c4661.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\extensions_crx_cache\metadata.jsonee4c3104-6823-4f7b-9bef-b4b4340c4661.tmp
                                        • Size 13B
                                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        memory/5292-445-0x00007FF8E5C70000-0x00007FF8E5C71000-memory.dmp
                                        Download

                                        memory/5292-444-0x00007FF8E5E90000-0x00007FF8E5E91000-memory.dmp
                                        Download