Overview

overview

8

Static

static

3

OperaGXSetup(3).exe

windows10-2004-x64

8

OperaGXSetup(3).exe

windows11-ltsc_2024-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    23/10/2026, 04:36

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaGXSetup(3).exe
  • Size 4.0MB
  • Sample261023-e8bcfszw4l
  • SHA256 28234ed4c6470b854caa1175399bf8a06117b6cdcbe7d1c9398f488a067a660a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Checks computer location settings 2 TTPs 21 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Writes a Windows system DLL name to a user directory 2 TTPs 2 IoCs

    A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

    defense_evasion
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 3 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 12 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 45 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 20 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 35 IoCs
  • Suspicious use of SendNotifyMessage 43 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaGXSetup(3).exe
    "C:\Users\Admin\AppData\Local\Temp\OperaGXSetup(3).exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4504
    • C:\Users\Admin\AppData\Local\Temp\7zS891D8F88\installer.exe
      C:\Users\Admin\AppData\Local\Temp\7zS891D8F88\installer.exe --server-tracking-blob=NTY5NzVkYTE2N2U5ZTU2NTM2NTEzYzE5MDEyMzBhNGY0ZmQxNzczMWNmNjdiMGU2NDkwOGIxMDQ2ZGZjN2YzYjp7ImNvdW50cnkiOiJVUyIsImVkaXRpb24iOiJzdGQtMiIsImZhc3Rfb25ib2FyZGluZyI6e30sImh0dHBfcmVmZXJyZXIiOiJodHRwczovL3d3dy5vcGVyYS5jb20vIiwiaW5zdGFsbGVyX25hbWUiOiJPcGVyYUdYU2V0dXAuZXhlIiwicHJvZHVjdCI6Im9wZXJhX2d4IiwicXVlcnkiOiIvb3BlcmFfZ3gvc3RhYmxlL3dpbmRvd3M/ZWRpdGlvbj1zdGQtMiZ1dG1fc291cmNlPVBXTmdhbWVzJnV0bV9tZWRpdW09cGEmdXRtX2NhbXBhaWduPVBXTl9VU19IVlJfOTU3MV9XRUJfODgxJmVkaXRpb249c3RkLTImdXRtX2lkPTM0MDBjOTg5ZTcwNDRlYjg4Zjg2ZDAxNTFlZWQxNjEwJmh0dHBfcmVmZXJyZXI9aHR0cHMlM0ElMkYlMkZ3d3cub3BlcmEuY29tJTJGZ2V0JTJGb3BlcmEtZ3glM0Z1dG1fbWVkaXVtJTNEcGElMjZ1dG1fY2FtcGFpZ24lM0RQV05fVVNfSFZSXzk1NzFfV0VCXzg4MSUyNnV0bV9pZCUzRDM0MDBjOTg5ZTcwNDRlYjg4Zjg2ZDAxNTFlZWQxNjEwJTI2dXRtX3NvdXJjZSUzRFBXTmdhbWVzJTI2ZWRpdGlvbiUzRHN0ZC0yJnV0bV9zaXRlPW9wZXJhX2NvbSZ1dG1fbGFzdHBhZ2U9b3BlcmEuY29tJTJGZ2V0JTJGb3BlcmEtZ3gmdXRtX2lkPTM0MDBjOTg5ZTcwNDRlYjg4Zjg2ZDAxNTFlZWQxNjEwJmRsX3Rva2VuPTU0NTAyMDQ5IiwidGltZXN0YW1wIjoiMTc5MjczMDE2MS41NTYwIiwidXNlcmFnZW50IjoiTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTU4LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTU4LjAiLCJ1dG0iOnsiY2FtcGFpZ24iOiJQV05fVVNfSFZSXzk1NzFfV0VCXzg4MSIsImlkIjoiMzQwMGM5ODllNzA0NGViODhmODZkMDE1MWVlZDE2MTAiLCJsYXN0cGFnZSI6Im9wZXJhLmNvbS9nZXQvb3BlcmEtZ3giLCJtZWRpdW0iOiJwYSIsInNpdGUiOiJvcGVyYV9jb20iLCJzb3VyY2UiOiJQV05nYW1lcyJ9LCJ1dWlkIjoiMTM0NmJiZDAtNjgzZi00YzQ5LWFhZjYtOTE5ZTY3MGM3MjQ1In0=
      2⤵
      • Downloads MZ/PE file
      • Executes dropped EXE
      • Enumerates connected drives
      • Reads the TCP/IP host and domain name from the registry
      • Enumerates system info in registry
      • Modifies system certificate store
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2300
      • C:\Users\Admin\AppData\Local\Temp\7zS891D8F88\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS891D8F88\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x26c,0x270,0x274,0x248,0x278,0x7ff66f8069d8,0x7ff66f8069e8,0x7ff66f8069f8
        3⤵
        • Executes dropped EXE
        PID:2348
      • C:\Users\Admin\AppData\Local\Temp\.opera\8801c066-e691-4848-b780-455e001c4001 Opera GX Installer Temp\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\.opera\8801c066-e691-4848-b780-455e001c4001 Opera GX Installer Temp\installer.exe" --version
        3⤵
        • Executes dropped EXE
        PID:624
      • C:\Users\Admin\AppData\Local\Temp\7zS891D8F88\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\7zS891D8F88\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=2300 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\8801c066-e691-4848-b780-455e001c4001 Opera GX Installer Temp\opera_package_20261023053622" --session-guid=2ec71348-1d2e-457e-9075-996e2043747a --server-tracking-blob=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 --desktopshortcut=1 --wait-for-package --initial-proc-handle=3809000000000000
        3⤵
        • Executes dropped EXE
        • Enumerates connected drives
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:1856
        • C:\Users\Admin\AppData\Local\Temp\7zS891D8F88\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS891D8F88\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x264,0x268,0x278,0x240,0x27c,0x7ff66f8069d8,0x7ff66f8069e8,0x7ff66f8069f8
          4⤵
          • Executes dropped EXE
          PID:3040
        • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe
          "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe" --backend --initial-pid=2300 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\8801c066-e691-4848-b780-455e001c4001 Opera GX Installer Temp\opera_package_202610230536221" --session-guid=2ec71348-1d2e-457e-9075-996e2043747a --server-tracking-blob=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 --desktopshortcut=1 --install-subfolder=137.0.6036.65
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Modifies registry class
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:3964
          • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x26c,0x270,0x274,0x248,0x278,0x7ff76a8569d8,0x7ff76a8569e8,0x7ff76a8569f8
            5⤵
            • Executes dropped EXE
            PID:2944
          • C:\Users\Admin\AppData\Local\Temp\.opera\8801c066-e691-4848-b780-455e001c4001 Opera GX Installer Temp\opera_package_202610230536221\assistant\assistant_installer.exe
            "C:\Users\Admin\AppData\Local\Temp\.opera\8801c066-e691-4848-b780-455e001c4001 Opera GX Installer Temp\opera_package_202610230536221\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Writes a Windows system DLL name to a user directory
            • Adds Run key to start application
            • System Location Discovery: System Language Discovery
            • Modifies Internet Explorer settings
            • Suspicious use of WriteProcessMemory
            PID:4264
            • C:\Users\Admin\AppData\Local\Temp\.opera\8801c066-e691-4848-b780-455e001c4001 Opera GX Installer Temp\opera_package_202610230536221\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\8801c066-e691-4848-b780-455e001c4001 Opera GX Installer Temp\opera_package_202610230536221\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0xe4b950,0xe4b95c,0xe4b968
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              PID:3356
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:984
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x224,0x228,0x22c,0x220,0x204,0xcfb950,0xcfb95c,0xcfb968
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:624
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Location Discovery: System Language Discovery
                • Enumerates system info in registry
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of SendNotifyMessage
                • Suspicious use of WriteProcessMemory
                PID:2124
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Suspicious use of WriteProcessMemory
                  PID:3204
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x154,0xfc,0x150,0x7ffd19ee8ca8,0x7ffd19ee8cb8,0x7ffd19ee8cc8
                    9⤵
                    • Executes dropped EXE
                    PID:1224
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  • Suspicious use of WriteProcessMemory
                  PID:3864
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x154,0x124,0x150,0x7ffd19ee8ca8,0x7ffd19ee8cb8,0x7ffd19ee8cc8
                    9⤵
                    • Executes dropped EXE
                    PID:4300
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x270,0x274,0x278,0x24c,0x27c,0xf18348,0xf18354,0xf18360
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of WriteProcessMemory
                  PID:5068
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:880
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x154,0x124,0x150,0x7ffd19ee8ca8,0x7ffd19ee8cb8,0x7ffd19ee8cc8
                      10⤵
                      • Executes dropped EXE
                      PID:4284
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:4552
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x178,0x17c,0x174,0x144,0x170,0x7ffd19ee8ca8,0x7ffd19ee8cb8,0x7ffd19ee8cc8
                      10⤵
                      • Executes dropped EXE
                      PID:884
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:4948
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x168,0x16c,0x170,0x164,0x174,0x7ffd19ee8ca8,0x7ffd19ee8cb8,0x7ffd19ee8cc8
                      10⤵
                      • Executes dropped EXE
                      PID:2704
          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            • Adds Run key to start application
            • Drops file in Program Files directory
            • Reads the TCP/IP host and domain name from the registry
            • Checks processor information in registry
            • Enumerates system info in registry
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of WriteProcessMemory
            PID:3940
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x154,0x124,0x150,0x7ffd19ee8ca8,0x7ffd19ee8cb8,0x7ffd19ee8cc8
              6⤵
              • Executes dropped EXE
              PID:1476
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1724,i,11019894666949974304,13550753146620156229,262144 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1904 /prefetch:2
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:760
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=2124,i,8822140929596521303,7114066258848347621,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2160 /prefetch:3
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Reads the TCP/IP host and domain name from the registry
              • System Time Discovery
              • Enumerates system info in registry
              PID:5096
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=2424,i,11182812292311667847,8660594559119225573,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2436 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:4348
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3204,i,452150786505939972,15048267372214286934,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3320 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5220
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3252,i,6525624945539932236,12460055112537945139,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3336 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:5228
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3264,i,5789153659845822071,17004403641347822982,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3348 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5236
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3272,i,9789504585343915073,2082537276718760468,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3376 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5244
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3284,i,18360362484453015700,12966735271458595986,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3396 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5252
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3240,i,14778447802309440597,12232297894937121255,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3436 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5260
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4152,i,795501525728102174,2397030312230690993,1572864 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4156 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              PID:5512
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_gx_splash.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
              6⤵
              • Executes dropped EXE
              PID:3460
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4776,i,10601248572039423547,7891094257692517470,1572864 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4800 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5460
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4272,i,12368916693607547091,10277548118584399812,1572864 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4264 /prefetch:2
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              PID:5536
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5096,i,1973385281288760544,16635127314938732651,1572864 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5100 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5140
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5328,i,4078678430386605043,8036876278930839848,1572864 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5344 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5688
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5452,i,1098053411133680764,1311627061668359352,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5476 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:5548
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5460,i,5942073561510425071,12850839897704259330,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5524 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:4212
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5464,i,2147100436122504039,1649687321261733174,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5584 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:2996
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5468,i,16826311412666311394,16651101301443985914,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5592 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:5852
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6444,i,111069439887615523,10726082685597608850,1572864 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6460 /prefetch:2
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              PID:5360
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6804,i,6648652497609654370,6339977548994667086,1572864 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6768 /prefetch:2
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:5392
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6428,i,11196039792477076619,9154470381941344229,1572864 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=7000 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6328
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=6976,i,1114007863191186402,17495088825101635299,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6772 /prefetch:8
              6⤵
              • Executes dropped EXE
              PID:4488
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7268,i,12449849020214654742,3171540764197730597,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7276 /prefetch:8
              6⤵
              • Executes dropped EXE
              PID:5804
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7308,i,188792708853352757,12587980857689121200,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7300 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6368
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7564,i,18432359840717343698,16313774175827290361,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7560 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6384
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7252,i,1149514446945447192,4685166011729807648,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7736 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:2932
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7752,i,8079790129802114513,17234367181354756069,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7724 /prefetch:8
              6⤵
              • Executes dropped EXE
              PID:3460
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7760,i,9350947289508986355,12332355857693501511,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7732 /prefetch:8
              6⤵
              • Executes dropped EXE
              PID:4704
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7920,i,11934253099998130524,14435331723478470224,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8156 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:5256
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8176,i,9702343195381451123,17716480159434457721,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8204 /prefetch:8
              6⤵
              • Executes dropped EXE
              PID:904
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8436,i,3007383952633932571,6302993432175068224,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8448 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6428
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8456,i,1444714176801633510,14921792122398165427,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8612 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6708
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8752,i,9048225335820256138,774713379668055382,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8460 /prefetch:8
              6⤵
              • Executes dropped EXE
              PID:6204
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8884,i,10705370454051176395,9350645027513079984,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8892 /prefetch:8
              6⤵
              • Enumerates system info in registry
              PID:6220
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=9128,i,18044296157268872556,10991055004513288654,1572864 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9080 /prefetch:2
              6⤵
              • Checks computer location settings
              PID:6528
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=9268,i,1489748891187660876,9136999428153907895,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9240 /prefetch:8
              6⤵
              • Enumerates system info in registry
              PID:7240
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=9864,i,16838559977101789963,3623560603768065173,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9872 /prefetch:8
              6⤵
              • Enumerates system info in registry
              PID:8032
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=9880,i,14373599050880042596,17995134685732769342,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9840 /prefetch:8
              6⤵
              • Enumerates system info in registry
              PID:8052
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=10228,i,18419892853507703176,5790132825690098370,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10208 /prefetch:8
              6⤵
                PID:6480
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=10220,i,2752107701146419451,5932696783353745327,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10264 /prefetch:8
                6⤵
                • Enumerates system info in registry
                PID:6812
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=10160,i,2676452372244023998,7310763998277341300,1572864 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10244 /prefetch:1
                6⤵
                • Checks computer location settings
                PID:6208
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
                6⤵
                • Reads the TCP/IP host and domain name from the registry
                • Enumerates system info in registry
                PID:5676
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x27c,0x280,0x284,0x258,0x288,0x7ff7b863e598,0x7ff7b863e5a8,0x7ff7b863e5b8
                  7⤵
                    PID:7608
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=10276,i,1892764048865448993,5844054981588393131,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10644 /prefetch:8
                  6⤵
                  • Enumerates system info in registry
                  PID:7428
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe" --fix-taskbar-pins
                  6⤵
                  • Enumerates system info in registry
                  PID:7244
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x264,0x268,0x26c,0x240,0x270,0x7ff76a8569d8,0x7ff76a8569e8,0x7ff76a8569f8
                    7⤵
                      PID:7960
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=10820,i,7413421937978187013,2006147840605595250,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10844 /prefetch:8
                    6⤵
                      PID:6936
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=10984,i,16599762246136919786,4868196101138430016,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=10996 /prefetch:8
                      6⤵
                      • Enumerates system info in registry
                      PID:6796
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=10864,i,10045050796073504500,13949608810541955631,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=4100 /prefetch:8
                      6⤵
                        PID:6648
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=10952,i,12121220646430458165,12537036566438634326,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=10740 /prefetch:8
                        6⤵
                        • Enumerates system info in registry
                        PID:5264
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=4496,i,16466926356705262295,17250515524546202884,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=10208 /prefetch:8
                        6⤵
                          PID:7144
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=4536,i,10605563188566737245,11393553828353718800,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=4488 /prefetch:8
                          6⤵
                            PID:7388
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=4520,i,6980714214792941533,6701738690530862486,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=10844 /prefetch:8
                            6⤵
                            • Enumerates system info in registry
                            PID:6316
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=10960,i,12082065023764698572,15970141681104502452,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=3380 /prefetch:8
                            6⤵
                            • Enumerates system info in registry
                            PID:5824
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=10964,i,8780895821097429780,17169907534457452877,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=11004 /prefetch:8
                            6⤵
                              PID:6348
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3732,i,12135977123209805051,6355770896588057466,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=3696 /prefetch:8
                              6⤵
                                PID:3016
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3872,i,16502593922171643735,15249236350462396907,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=3376 /prefetch:8
                                6⤵
                                • Enumerates system info in registry
                                PID:4240
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3776,i,18326731155043996685,695605983531742389,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=3348 /prefetch:8
                                6⤵
                                  PID:5404
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7636,i,3630823166802434334,7757005685625821675,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=10712 /prefetch:8
                                  6⤵
                                  • Enumerates system info in registry
                                  PID:6292
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=7712,i,4656693999235757819,18323937580224974703,1572864 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=10344 /prefetch:2
                                  6⤵
                                  • Checks computer location settings
                                  PID:6256
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7552,i,11173053010028032641,9352545207810433489,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=10224 /prefetch:8
                                  6⤵
                                  • Enumerates system info in registry
                                  PID:6972
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8204,i,12993627516796593687,14058925170716820760,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=8484 /prefetch:8
                                  6⤵
                                  • Enumerates system info in registry
                                  PID:5236
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8076,i,16102369596232810459,2760503376395444045,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=8068 /prefetch:8
                                  6⤵
                                    PID:6428
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7912,i,9792460178918855411,15286166521335190431,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=6364 /prefetch:8
                                    6⤵
                                    • Enumerates system info in registry
                                    PID:7940
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=7840,i,14039312848586234545,8232121177855074491,1572864 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=3760 /prefetch:2
                                    6⤵
                                    • Checks computer location settings
                                    PID:6820
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=3744,i,1374246663899392213,13115910127388097463,1572864 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=4552 /prefetch:2
                                    6⤵
                                    • Checks computer location settings
                                    • Enumerates system info in registry
                                    PID:7248
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=10868,i,13987590176991423630,12320719171742132303,1572864 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=7908 /prefetch:2
                                    6⤵
                                    • Checks computer location settings
                                    • Enumerates system info in registry
                                    PID:2304
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=9288,i,1939020628262009502,14524320859354095673,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=8256 /prefetch:8
                                    6⤵
                                      PID:6620
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=11108,i,10264932297199683141,13664248372110274372,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=10688 /prefetch:8
                                      6⤵
                                      • Enumerates system info in registry
                                      PID:6408
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=10116,i,7669905699042642490,16353708949328421494,1572864 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=6408 /prefetch:2
                                      6⤵
                                      • Checks computer location settings
                                      PID:8052
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=3700,i,16357942753923371533,5013547724381682641,1572864 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=3344 /prefetch:2
                                      6⤵
                                      • Checks computer location settings
                                      PID:4632
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=7780,i,540162228900488122,13179728955042302715,1572864 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=9860 /prefetch:2
                                      6⤵
                                      • Checks computer location settings
                                      • Enumerates system info in registry
                                      PID:7160
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=10396,i,15920475201555442967,5166088533467804800,1572864 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=9360 /prefetch:2
                                      6⤵
                                      • Checks computer location settings
                                      PID:8176
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=3688,i,3379339221637252413,8683512068844701004,1572864 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=11004 /prefetch:2
                                      6⤵
                                      • Checks computer location settings
                                      PID:2096
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=4504,i,2285975513338327166,15018172814030223719,524288 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=7736 /prefetch:8
                                      6⤵
                                      • Enumerates system info in registry
                                      PID:4704
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=9900,i,11310325623353627042,7346751583077437478,1572864 --field-trial-handle=1912,i,16826734482053577751,5675090290281104487,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,10780348420462846209,887571927577619888,4 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=10916 /prefetch:2
                                      6⤵
                                      • Checks computer location settings
                                      PID:1480
                              • C:\Users\Admin\AppData\Local\Temp\.opera\8801c066-e691-4848-b780-455e001c4001 Opera GX Installer Temp\opera_package_202610230536221\assistant\Opera_GX_assistant_137.0.6036.65_Setup.exe_sfx.exe
                                "C:\Users\Admin\AppData\Local\Temp\.opera\8801c066-e691-4848-b780-455e001c4001 Opera GX Installer Temp\opera_package_202610230536221\assistant\Opera_GX_assistant_137.0.6036.65_Setup.exe_sfx.exe"
                                3⤵
                                • Executes dropped EXE
                                • Writes a Windows system DLL name to a user directory
                                • System Location Discovery: System Language Discovery
                                PID:1736
                              • C:\Users\Admin\AppData\Local\Temp\.opera\8801c066-e691-4848-b780-455e001c4001 Opera GX Installer Temp\opera_package_202610230536221\assistant\assistant_installer.exe
                                "C:\Users\Admin\AppData\Local\Temp\.opera\8801c066-e691-4848-b780-455e001c4001 Opera GX Installer Temp\opera_package_202610230536221\assistant\assistant_installer.exe" --version
                                3⤵
                                • Executes dropped EXE
                                • Loads dropped DLL
                                • System Location Discovery: System Language Discovery
                                • Enumerates system info in registry
                                • Suspicious use of WriteProcessMemory
                                PID:4072
                                • C:\Users\Admin\AppData\Local\Temp\.opera\8801c066-e691-4848-b780-455e001c4001 Opera GX Installer Temp\opera_package_202610230536221\assistant\assistant_installer.exe
                                  "C:\Users\Admin\AppData\Local\Temp\.opera\8801c066-e691-4848-b780-455e001c4001 Opera GX Installer Temp\opera_package_202610230536221\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x228,0x22c,0x230,0x204,0x234,0xe4b950,0xe4b95c,0xe4b968
                                  4⤵
                                  • Executes dropped EXE
                                  • Loads dropped DLL
                                  • System Location Discovery: System Language Discovery
                                  PID:4288
                          • C:\Windows\system32\wbem\unsecapp.exe
                            C:\Windows\system32\wbem\unsecapp.exe -Embedding
                            1⤵
                              PID:5796
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart
                              1⤵
                              • Executes dropped EXE
                              • Loads dropped DLL
                              • Enumerates system info in registry
                              • Suspicious use of WriteProcessMemory
                              PID:6088
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x154,0x124,0x150,0x7ffd19ee8ca8,0x7ffd19ee8cb8,0x7ffd19ee8cc8
                                2⤵
                                • Executes dropped EXE
                                PID:6104
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
                              1⤵
                              • Reads the TCP/IP host and domain name from the registry
                              • Enumerates system info in registry
                              PID:6596
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x278,0x27c,0x280,0x210,0x284,0x7ff7b863e598,0x7ff7b863e5a8,0x7ff7b863e5b8
                                2⤵
                                  PID:7788
                                • C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe
                                  "C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe" --version
                                  2⤵
                                    PID:5260

                                Network

                                      MITRE ATT&CK Enterprise v16

                                      Reconnaissance

                                      Resource Development

                                      Initial Access

                                      Execution

                                      Persistence

                                      Boot or Logon Autostart Execution

                                      1
                                      T1547

                                      Registry Run Keys / Startup Folder

                                      1
                                      T1547.001

                                      Event Triggered Execution

                                      1
                                      T1546

                                      Component Object Model Hijacking

                                      1
                                      T1546.015

                                      Hijack Execution Flow

                                      1
                                      T1574

                                      DLL Search Order Hijacking

                                      1
                                      T1574.001

                                      Privilege Escalation

                                      Boot or Logon Autostart Execution

                                      1
                                      T1547

                                      Registry Run Keys / Startup Folder

                                      1
                                      T1547.001

                                      Event Triggered Execution

                                      1
                                      T1546

                                      Component Object Model Hijacking

                                      1
                                      T1546.015

                                      Hijack Execution Flow

                                      1
                                      T1574

                                      DLL Search Order Hijacking

                                      1
                                      T1574.001

                                      Defense Evasion

                                      Hijack Execution Flow

                                      1
                                      T1574

                                      DLL Search Order Hijacking

                                      1
                                      T1574.001

                                      Masquerading

                                      1
                                      T1036

                                      Match Legitimate Name or Location

                                      1
                                      T1036.005

                                      Modify Registry

                                      3
                                      T1112

                                      Subvert Trust Controls

                                      1
                                      T1553

                                      Install Root Certificate

                                      1
                                      T1553.004

                                      Credential Access

                                      Credentials from Password Stores

                                      1
                                      T1555

                                      Credentials from Web Browsers

                                      1
                                      T1555.003

                                      Unsecured Credentials

                                      1
                                      T1552

                                      Credentials In Files

                                      1
                                      T1552.001

                                      Discovery

                                      Peripheral Device Discovery

                                      1
                                      T1120

                                      Query Registry

                                      6
                                      T1012

                                      System Information Discovery

                                      5
                                      T1082

                                      System Location Discovery

                                      1
                                      T1614

                                      System Language Discovery

                                      1
                                      T1614.001

                                      System Network Configuration Discovery

                                      1
                                      T1016

                                      System Time Discovery

                                      1
                                      T1124

                                      Lateral Movement

                                      Collection

                                      Data from Local System

                                      1
                                      T1005

                                      Command and Control

                                      Exfiltration

                                      Impact

                                      Replay Monitor

                                      Loading Replay Monitor...

                                      Downloads

                                      verified_contents.json
                                      • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping3940_486118720\_metadata\verified_contents.json
                                      • Size 1KB
                                      • SHA256 48264eccb505f5c0eb1e0d8ddabf79e4fd664018dce8f65642e0052fbeeba6ad
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      preloaded_data.pb
                                      • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping3940_486118720\preloaded_data.pb
                                      • Size 8KB
                                      • SHA256 9b32ba9222d44bebc479ffa9704d2a9abccae153982838a3b9a79846b80877a3
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      f_000009
                                      • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\Cache\Cache_Data\f_000009
                                      • Size 77KB
                                      • SHA256 56ced9c310659237d6b5cc37f6acdaa3deadf2b3adeaefef8dd6b285d9e9ccb3
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      f_00001e
                                      • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\Cache\Cache_Data\f_00001e
                                      • Size 45KB
                                      • SHA256 88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      snapshot-new.baf
                                      • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\Cache\No_Vary_Search\snapshot-new.baf
                                      • Size 20B
                                      • SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      f_000001
                                      • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\System Cache\Cache_Data\f_000001
                                      • Size 215KB
                                      • SHA256 ee62e0e9ac2ff3c4d94f1d2aa721e8fd0512bbb87a605e8cba3af5f70072f6a0
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      137.0.6036.65.manifest
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\137.0.6036.65.manifest
                                      • Size 225B
                                      • SHA256 4fc3f11f18f24cddf8ba040c914a1cace41e81eee15f34d4143a4be785bbb28a
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      150x150Logo.scale-100.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-100.png
                                      • Size 2KB
                                      • SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      150x150Logo.scale-100_contrast-white.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-100_contrast-white.png
                                      • Size 1KB
                                      • SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      150x150Logo.scale-140.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-140.png
                                      • Size 3KB
                                      • SHA256 a36a13a5d5e3d39e3018ccc5f8859944c87256f8be24a3c08a6bf3cb06a26804
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      150x150Logo.scale-140_contrast-white.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-140_contrast-white.png
                                      • Size 2KB
                                      • SHA256 0bd63fe653885286e180fbdf6d1dadc66af242b8ed6bd1d03d8c5eccc20e91d7
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      150x150Logo.scale-180.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-180.png
                                      • Size 3KB
                                      • SHA256 6a8f64754c75edcc9abc1138e44acbd7064d7e8e2a28783939241dbd6afa30a5
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      150x150Logo.scale-180_contrast-white.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-180_contrast-white.png
                                      • Size 3KB
                                      • SHA256 a706b332e6a846357a86c30d0e8bb7697e7dd55c2ae592dd45611ddce0c0bf14
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      150x150Logo.scale-80.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-80.png
                                      • Size 1KB
                                      • SHA256 7e6b0d9ea7fda1b5ca7a0b01290521dff943da4cbf1498412ca7d749db42c32d
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      150x150Logo.scale-80_contrast-white.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-80_contrast-white.png
                                      • Size 1KB
                                      • SHA256 dfd1054f989cdee25f19ea792f363f042a125cab537a424f0224bbee13607e39
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      70x70Logo.scale-100.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\70x70Logo.scale-100.png
                                      • Size 1KB
                                      • SHA256 a333d7e4293f5269426b3fcb673a284f3708a66f957de62403b6570b24bae8f5
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      70x70Logo.scale-100_contrast-white.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\70x70Logo.scale-100_contrast-white.png
                                      • Size 1KB
                                      • SHA256 ebbe0b4761ea8968a0a3fafb383ac7ae175e98cd31a0f41bdf5fcb43469b58ec
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      70x70Logo.scale-140.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\70x70Logo.scale-140.png
                                      • Size 1KB
                                      • SHA256 207519f1c7b6c7509bfeb7b55724997eec6456c8baf55e882e72fc5cd43da221
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      70x70Logo.scale-140_contrast-white.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\70x70Logo.scale-140_contrast-white.png
                                      • Size 1KB
                                      • SHA256 464afaf960c32abdc2c3937a48bf14c5d1a819b017e719fded591d43a65d94c4
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      70x70Logo.scale-180.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\70x70Logo.scale-180.png
                                      • Size 2KB
                                      • SHA256 d6367dbc074e37f3488c26b0bad229bfe99f5c6bb0e28d37b41906c436152b57
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      70x70Logo.scale-180_contrast-white.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\70x70Logo.scale-180_contrast-white.png
                                      • Size 2KB
                                      • SHA256 5d46e4056f3915c279f1fa9edf61d93529fbcae5c59d616380ec5d9405b7763d
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      70x70Logo.scale-80.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\70x70Logo.scale-80.png
                                      • Size 1KB
                                      • SHA256 dc20e5aa2b500cd5b5c9f89647d3487810685c94268f22678e27820e2454bb3e
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      70x70Logo.scale-80_contrast-white.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\70x70Logo.scale-80_contrast-white.png
                                      • Size 901B
                                      • SHA256 dd6f46d32c3e235508f9e4c7d7f993bd807d955bca7e63cf3d57c6c4c102f46d
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      CChromaEditorLibrary64.dll
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\CChromaEditorLibrary64.dll
                                      • Size 145KB
                                      • SHA256 0fbf0cf98ea7033ebe90018190db609fb6b3be3df36dbde0cd468928da2ccae3
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      CUESDK.x64_2017.dll
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\CUESDK.x64_2017.dll
                                      • Size 474KB
                                      • SHA256 d07154c8a9182617f229885aa03b0580a2cbc58ab5781c09392a93abf901e37f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      assistant_package
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\assistant_package
                                      • Size 4.0MB
                                      • SHA256 2150fd26a7218ffe0eec80ecd9edec98bfdbbb2dd6c2107120cdd0c751b03b43
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      d3dcompiler_47.dll
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\d3dcompiler_47.dll
                                      • Size 4.5MB
                                      • SHA256 2332e7038319484f84e8670ec0d3554211ac22c42a2dc5e7471714479d28171e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      dxcompiler.dll
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\dxcompiler.dll
                                      • Size 24.6MB
                                      • SHA256 62ea4285f09a5976fb886cbb36dd355e110a2ba32a5c97f2dfdaa40143493f63
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      dxil.dll
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\dxil.dll
                                      • Size 1.4MB
                                      • SHA256 13f78cd54a51a006e514f9e497f26f10b767b2c3f25bb2de6c9f09256fa45b76
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      files_list
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\files_list
                                      • Size 4KB
                                      • SHA256 af11c273044e6a7e57486d761b24e317a15362c885442c9e1beab5ad1be54717
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      headless_command_resources.pak
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\headless_command_resources.pak
                                      • Size 2KB
                                      • SHA256 e1f2ec7189570bec91b544cd289af7af3dfe03d4694634068d7ae3ce200792f1
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      icudtl.dat
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\icudtl.dat
                                      • Size 10.4MB
                                      • SHA256 7377adaf7f3aa2170098bd2bc144ee5f8b9677a206b54ce93c0ec392b0a6abea
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      installer.exe
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe
                                      • Size 9.2MB
                                      • SHA256 f79b9723e62a3cb69b94cbd762edc2eb94ddefa1d79823d760a0c5fd0299ccd7
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      installer_helper_64.exe
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer_helper_64.exe
                                      • Size 606KB
                                      • SHA256 d580b8b100f1f3beef5bc354fa2136e9a0df8b676af4c832f0051abc2620a105
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      libEGL.dll
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\libEGL.dll
                                      • Size 454KB
                                      • SHA256 5bca02817a6476fd69f2b292e1a440a809fc44ebc9170ff540cd406b75d23211
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      libGLESv2.dll
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\libGLESv2.dll
                                      • Size 454KB
                                      • SHA256 bfb09902c6209510d8531b6491755c10a15ebb5f9f1cacb02e1220adfa560530
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      bg.pak
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\localization\bg.pak
                                      • Size 995KB
                                      • SHA256 c9ac1578585dc2f69f14939b8809893c5949a102f37e782c35d89496323afd7f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      bn.pak
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\localization\bn.pak
                                      • Size 1.2MB
                                      • SHA256 734a1effeb04a9208f007efec4253e23cc89491204557ae9aba3a7d85775ac33
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      ca.pak
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\localization\ca.pak
                                      • Size 628KB
                                      • SHA256 e5fc3e0390f04533092294939756cc054f333a731f269a4f9a5f3fff3557e4ca
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      cs.pak
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\localization\cs.pak
                                      • Size 627KB
                                      • SHA256 83b93e114cb334ef87d7a5a46bd34dd7b4f21846b42293e29c3e21c431101ab1
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      da.pak
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\localization\da.pak
                                      • Size 575KB
                                      • SHA256 f867df2e90cfacd2f3c0c77ff1b522feb4b5c4fab3277cadb36cd26597c758fb
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      de.pak
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\localization\de.pak
                                      • Size 624KB
                                      • SHA256 f54d2e1cda529186782d0c6ff2f988e0e410a76958bc6e10ca2dd9d41527fc5a
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      el.pak
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\localization\el.pak
                                      • Size 1.1MB
                                      • SHA256 fa0d7d4b9c9c522fd96634c8a4760398eebb4ffc6b2aeedd76d2440be1588a20
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      en-GB.pak
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\localization\en-GB.pak
                                      • Size 506KB
                                      • SHA256 c276b31839a86ca14a4c040b80e3208329961dcd619485876e4def1c63ac3e06
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      en-US.pak
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\localization\en-US.pak
                                      • Size 510KB
                                      • SHA256 e23b7966aae1a943fcfc4a5d87728e61c4e32717d7da3ce71adde98ceb45a5a2
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      es-419.pak
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\localization\es-419.pak
                                      • Size 616KB
                                      • SHA256 84a38effc1c8130f8a9c120dc535c346566064120c2e70a16a5f6f222d0fd669
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      es.pak
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\localization\es.pak
                                      • Size 610KB
                                      • SHA256 e6e86d0c6b69053cc5a5fded23f924f17ef98b39dbc40e0d59e311f9d1352ecb
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      fi.pak
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\localization\fi.pak
                                      • Size 574KB
                                      • SHA256 853a8a16858e2d072a08a4ec47503788eab2a07a98e7b09ee788cbd0ba9b1d61
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      browser_assistant.exe
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                      • Size 5.3MB
                                      • SHA256 ca7d5883a0d16362f9adcc9787d84c3b6d0535b5c8625f44cf80b1a665f6cb63
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      opera_autoupdate.exe
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                      • Size 7.5MB
                                      • SHA256 7a443a448eba30d31d3730edff81f166feffeefe8ef65459ceb05dd4666752a6
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      installer_prefs.json.backup
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json.backup
                                      • Size 2KB
                                      • SHA256 20a9501650bb34ccfa6da5b328adf8277e74e1b65490e39408a0649ae74ffae1
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      installer_prefs.json62b9709a-98ac-4698-b812-3b41ec5e63c5.tmp
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json62b9709a-98ac-4698-b812-3b41ec5e63c5.tmp
                                      • Size 2KB
                                      • SHA256 26e878fb11d0ed6ef11e4678680ba1ec0ca57f2a4a881e799e87999fe8524509
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      opera.exe
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      • Size 3.4MB
                                      • SHA256 9affc5d320b2daa663faaa21d4eb5c39666022e749d0297cae81b163d4d3a031
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Opera GX Browser.lnk
                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\8801c066-e691-4848-b780-455e001c4001 Opera GX Installer Temp\opera_package_202610230536221\Opera GX Browser.lnk
                                      • Size 1KB
                                      • SHA256 16b457f3bdc820f763c41f8ba3c616c8c74038f86f01c717528e6f368019c291
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Opera_GX_assistant_137.0.6036.65_Setup.exe_sfx.exe
                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\8801c066-e691-4848-b780-455e001c4001 Opera GX Installer Temp\opera_package_202610230536221\assistant\Opera_GX_assistant_137.0.6036.65_Setup.exe_sfx.exe
                                      • Size 3.2MB
                                      • SHA256 cd8129a92e34618206b386216a307a768ba8770cb76b4c16a08b35ac23c1228d
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      assistant_installer.exe
                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\8801c066-e691-4848-b780-455e001c4001 Opera GX Installer Temp\opera_package_202610230536221\assistant\assistant_installer.exe
                                      • Size 2.5MB
                                      • SHA256 d1bebcbda51c7869eebf33275e4b6c3d2b3d37df6fae74a0561cdf2dffb5b293
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      dbgcore.dll
                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\8801c066-e691-4848-b780-455e001c4001 Opera GX Installer Temp\opera_package_202610230536221\assistant\dbgcore.dll
                                      • Size 238KB
                                      • SHA256 65a487c32b2b0fdb5a022a7ed54dcf6b6f8271985d50c45c432fc8acb1bdf115
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      dbghelp.dll
                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\8801c066-e691-4848-b780-455e001c4001 Opera GX Installer Temp\opera_package_202610230536221\assistant\dbghelp.dll
                                      • Size 589KB
                                      • SHA256 2ec4dcc1209a7f59c9215c5d8f17d7b35a91b2faf84d63ca5666cb6b02e46050
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      installer_prefs_include.json
                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\8801c066-e691-4848-b780-455e001c4001 Opera GX Installer Temp\opera_package_202610230536221\installer_prefs_include.json
                                      • Size 816B
                                      • SHA256 0f9e6daef7f8e66c8cbc9aade8322c86e3065f6b656906c42af593674604e699
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      installer_prefs_include.json0b05ee93-fd06-43a4-a70f-21cc7b746596.tmp
                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\8801c066-e691-4848-b780-455e001c4001 Opera GX Installer Temp\opera_package_202610230536221\installer_prefs_include.json0b05ee93-fd06-43a4-a70f-21cc7b746596.tmp
                                      • Size 831B
                                      • SHA256 8d2529e320d219fc5ecb8ead9a3273fcd46001ef1ae6d0996709c2d2c96e73c7
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      installer_prefs_include.jsondabbd164-6149-4b9c-ad94-aecb1cc44f2b.tmp
                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\8801c066-e691-4848-b780-455e001c4001 Opera GX Installer Temp\opera_package_202610230536221\installer_prefs_include.jsondabbd164-6149-4b9c-ad94-aecb1cc44f2b.tmp
                                      • Size 1KB
                                      • SHA256 8f64326b6e6c23f51e74c70877540c9185c2a218190c141f2fbe8dd60dfefdfd
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      custom_partner_content.json
                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\8801c066-e691-4848-b780-455e001c4001 Opera GX Installer Temp\opera_package_202610230536221\resources\custom_partner_content.json
                                      • Size 245KB
                                      • SHA256 84bc1efb211c6b45f2906278a36f1414922f994a9611bbee7713ffd4ae21e967
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      installer.exe
                                      • Path C:\Users\Admin\AppData\Local\Temp\7zS891D8F88\installer.exe
                                      • Size 9.2MB
                                      • SHA256 407955bd8dc43601214a22c6696f6db8da9352eb0c13b38fbeb780a90755fc52
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      fbe87d1c-6720-42b2-92b0-c4f3389d7c62.tmp
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3940_1331486041\fbe87d1c-6720-42b2-92b0-c4f3389d7c62.tmp
                                      • Size 14KB
                                      • SHA256 99dfb50b062db90ac585e2a877192973b88522ceb257a78345f1f1ca5da98e1b
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      0e131d6a-e3ab-4a20-b4b4-8c7a31f144d2.tmp
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3940_1825671593\0e131d6a-e3ab-4a20-b4b4-8c7a31f144d2.tmp
                                      • Size 3.0MB
                                      • SHA256 5c8953fdd4f8a848a8711f749b4bf85376836da9a065b7bdd887e5d03f44cfd8
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3940_1825671593\CRX_INSTALL\_locales\en\messages.json
                                      • Size 396B
                                      • SHA256 1bcb4888a65788a50ed88f4bd95955d1dafdc950b5ef4609b37f42934a4bf3b9
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Icon_Light_Neutral.png
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3940_1825671593\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                      • Size 2KB
                                      • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Icon_Light_Neutral.png
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3940_1825671593\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
                                      • Size 962B
                                      • SHA256 e8adb8a9dcca121a1853749ebef122b84a995ebf8775cd27b0dd54bab9840bd1
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      favicon_opera_one.png
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3940_1911809557\CRX_INSTALL\favicon_opera_one.png
                                      • Size 2KB
                                      • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      f928a893-783f-4b09-934b-238c73df5690.tmp
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3940_1911809557\f928a893-783f-4b09-934b-238c73df5690.tmp
                                      • Size 3.5MB
                                      • SHA256 9d645b0ce032688d4f3100cd1f1d178d3c2c9d04bb691144659b98b4931d8eef
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      7edcf32c-6214-4918-b5e4-e9c70871d096.tmp
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3940_2072446526\7edcf32c-6214-4918-b5e4-e9c70871d096.tmp
                                      • Size 46KB
                                      • SHA256 176a736c95c08746480a0e25f7acf323d502d0f6aac4b4dfbeb2713513af8a52
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      logo_128.png
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3940_2072446526\CRX_INSTALL\public\icons\logo_128.png
                                      • Size 7KB
                                      • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      logo_16.png
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3940_2072446526\CRX_INSTALL\public\icons\logo_16.png
                                      • Size 653B
                                      • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      logo_32.png
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3940_2072446526\CRX_INSTALL\public\icons\logo_32.png
                                      • Size 1KB
                                      • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      logo_48.png
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3940_2072446526\CRX_INSTALL\public\icons\logo_48.png
                                      • Size 2KB
                                      • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      logo_64.png
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3940_2072446526\CRX_INSTALL\public\icons\logo_64.png
                                      • Size 2KB
                                      • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      sidebar-icon-57.png
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3940_238450206\CRX_INSTALL\icons\sidebar-icon-57.png
                                      • Size 914B
                                      • SHA256 47814ebe57fa54280f03a94a13f582ff7b781fd7362c797117cc2e6ae388a160
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      c1e8ad73-1614-48bd-b9bc-c3d5a3d65143.tmp
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3940_238450206\c1e8ad73-1614-48bd-b9bc-c3d5a3d65143.tmp
                                      • Size 1.4MB
                                      • SHA256 a75f68026cc1314a842f2b95800dd32a2c8792824be753ef40720af6beab58c2
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      7f34a959-d048-422c-8244-604bd52d0a2f.tmp
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3940_720371508\7f34a959-d048-422c-8244-604bd52d0a2f.tmp
                                      • Size 472KB
                                      • SHA256 4b9b79291aca9c45d54ae238655f41b7a0eecb0b80fb3d172cd0b1d75e712540
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3940_720371508\CRX_INSTALL\_locales\en\messages.json
                                      • Size 2KB
                                      • SHA256 13f83e7ad61d853293597de9e7583e7724680b7c80c31d0834097f2a7022741a
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Opera GX Browser.lnk
                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera GX Browser.lnk
                                      • Size 2KB
                                      • SHA256 668b0f7b8d1268fb5092364ca3def77a9869bcb0a4c83c688d6a0a5cffdf4cd0
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      36W5UYCGQFQZ5X8K55G1.temp
                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\36W5UYCGQFQZ5X8K55G1.temp
                                      • Size 22KB
                                      • SHA256 c5c59cf61110c1aa6774c699bd6822bf3ac57a01c2f76037ccccd30d7e09b186
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      7f8ed395ccba721d.customDestinations-ms
                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\7f8ed395ccba721d.customDestinations-ms
                                      • Size 22KB
                                      • SHA256 c5dfef5697264ee3c2e886761130f0aef0b6bb27f5967a6134549b003d51132c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      settings.dat
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                      • Size 40B
                                      • SHA256 bd4fa19f15b5235c85bbb70d74012c0fdc22a1bd95e5a73b76d2f4a6dc16fece
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      temp-index
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\temp-index
                                      • Size 48B
                                      • SHA256 32e87591bf58f2f4e73cc073ab5151485f1d183de6aa5070c95c6567b703cbab
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      temp-index
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\temp-index
                                      • Size 2KB
                                      • SHA256 09471f483d78569e6eaf08648ca4b8dea25b58c746c0df028c0f2bb87e703c55
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      data_0
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_0
                                      • Size 8KB
                                      • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      data_1
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_1
                                      • Size 264KB
                                      • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      data_2
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_2
                                      • Size 8KB
                                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      data_3
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_3
                                      • Size 8KB
                                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      MANIFEST-000001
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\MANIFEST-000001
                                      • Size 41B
                                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\_locales\en\messages.json
                                      • Size 2KB
                                      • SHA256 57e2b257a65fa5e980c619214ed9ae25580bbd581143e28abac49928b31977a6
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      background.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\background.js
                                      • Size 17KB
                                      • SHA256 c7a162a7650887dffe12034ddbba5ddb91ca5bf4f5478f59ded324f7e088bacb
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      twitch.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch.png
                                      • Size 677B
                                      • SHA256 959a810529fcf478d40d02fc418e6223e38bdeba0deae8e83b55028d47bbef6b
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      twitch16.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch16.png
                                      • Size 370B
                                      • SHA256 6534efc770a8a32c881258029c2f2b9d9f1b75228f53bf9b4cd2b9a9689884e0
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      twitch48.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch48.png
                                      • Size 921B
                                      • SHA256 47e37c0726206401cc69cb6ab0fdda79b364356a5e2fdbd5ce479bfbb965f245
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      colors.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\colors.js
                                      • Size 5KB
                                      • SHA256 80cc31214c554212050ac62dd04bdb33b012b3b42634ef16f461aca2dc8572fb
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      preferences.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\preferences.js
                                      • Size 4KB
                                      • SHA256 424634b7911f5002d426d9455139bfe578e0a3d8143a4b5f23597ffc22ec0923
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      stats.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\stats.js
                                      • Size 1KB
                                      • SHA256 f2b7e0086a62415550738764edbd98a22ed7524623343b4276951b8cb2207b52
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      twitch_api.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\twitch_api.js
                                      • Size 4KB
                                      • SHA256 db2f7f893c141525ecb33ce344471ef44dd457980f1fe138a91759d556b4a002
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      volume.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\volume.js
                                      • Size 1KB
                                      • SHA256 3a30f4a95a4ca688fafa4c5594c039bbba5e5d14187dd1da286e48387d3e3d7e
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      main.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.9_0\main.js
                                      • Size 48KB
                                      • SHA256 c2d961a8340848930aa0b7141ec03b973639d119756904d35fc8efe1a4cb8ec7
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      3ebfaf1c4dcf4f3b0255.ttf
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\2.0.0_0\3ebfaf1c4dcf4f3b0255.ttf
                                      • Size 316KB
                                      • SHA256 5ae3965ae20c8090af12aeafec6882ef41829397f28f554e89fbabdf9069ea7e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      background.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\2.0.0_0\background.js
                                      • Size 561KB
                                      • SHA256 4761b2a40e2d0da01ab6e2fc7a22694d4964cf6738347874d6c9a8f7797b66e7
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      compact.html
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\2.0.0_0\compact.html
                                      • Size 967B
                                      • SHA256 aa4fe5f4f3ba3c9525f26863bd96d8193068e4fb0d7c1a10cea08af3107a39ad
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      sidebar-icon-57.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\2.0.0_0\icons\sidebar-icon-57.png
                                      • Size 878B
                                      • SHA256 f933e3885645efb79fb9c683c14d58a6c324162f7f79c1b2550caeecce708cb2
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      popup.css
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\2.0.0_0\popup.css
                                      • Size 85KB
                                      • SHA256 e923156474b883000789d5293e0f6fd5719b463c3d4d804d6419af21bee1e682
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      scraping-method-Dq4mm50p.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\scraping-method-Dq4mm50p.js
                                      • Size 6KB
                                      • SHA256 99c8d4f76ebc9fc6cea115065570a12d41903c93e18c1c6385b5b2e70256eb70
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      service-worker.ts-fle0M1Xd.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\service-worker.ts-fle0M1Xd.js
                                      • Size 13KB
                                      • SHA256 4ebb6cb9c3f033302d6a8c31329009082bafeab73c39cca179511b5a972ba8f8
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      service-worker-loader.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\service-worker-loader.js
                                      • Size 49B
                                      • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      1196.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\1196.js
                                      • Size 155KB
                                      • SHA256 bcfbdb2e6b4172d12b0a34c35983ff6b6e7618cb83ee153f835aca07da70eb8c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      4032.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\4032.js
                                      • Size 23KB
                                      • SHA256 59c4efc8651a7b080120ae078fce1ac17f42c9cebebb71cb9f5380dcac9a169e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      4505.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\4505.js
                                      • Size 443KB
                                      • SHA256 11af1029768b2991bdbf766aa7db050a766ef7f0a37815c45c9bede78a08a4de
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      5345.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\5345.js
                                      • Size 89KB
                                      • SHA256 753ed393955ce21fc727702f0322ee6cac894e382af168720607d079e8a89502
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      649.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\649.js
                                      • Size 11KB
                                      • SHA256 b0fdc98099d5d4d8bdc43eddccacef4a0ab5d3b373aeb2342fce2c728981d66d
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      7565.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\7565.js
                                      • Size 39KB
                                      • SHA256 a7d9547c5fb459762cb200f1e021dfc0efc9c08297c5349f8599dbafdf2dbb18
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      8116.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\8116.js
                                      • Size 41KB
                                      • SHA256 8bacfc8b500836ab9415b32b7f3c4c172addf76525bef9a73e2cd84c753e39f8
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      blacklist.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\blacklist.js
                                      • Size 76KB
                                      • SHA256 cf129d43fd65f2c93eafc53ad899911737aab73564fbec7bdac87b5b0788400e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      favicon_opera_one.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\favicon_opera_one.png
                                      • Size 2KB
                                      • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      reader_mode.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\reader_mode.js
                                      • Size 112KB
                                      • SHA256 ebb002d9d7d9206bc39d3f44bae6e49b7d694a172a0b1da9934f49c17f433084
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      service_worker.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\service_worker.js
                                      • Size 1.1MB
                                      • SHA256 055406577738ff3eac762b7d2e7360bac21acf0bb688d829d0acfb9126993de2
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      spotify_frame_interceptor.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\spotify_frame_interceptor.js
                                      • Size 5KB
                                      • SHA256 f25cc540e5212f9f327bfb16702e156d385aa2545bd1b4c572f6a5543d4e7930
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\_locales\en\messages.json
                                      • Size 429B
                                      • SHA256 c6a7161359e3c4fbc4059b7209c585f9aa2306c08e6c39a3003f4b29f2ceb22d
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      background.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\background.js
                                      • Size 105KB
                                      • SHA256 9a9b0f7b3070d6f47773e487ebf53134c7629c15c4564ca613c3c9a8077b543d
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      content.js.LICENSE.txt
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\content.js.LICENSE.txt
                                      • Size 1KB
                                      • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Icon_Light_Active.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\128\Icon_Light_Active.png
                                      • Size 2KB
                                      • SHA256 97d9553a4f725354a6d5c3eff11f31285fd89c3b150593f04785b83d0a56efc2
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Icon_Light_Available_Red.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\128\Icon_Light_Available_Red.png
                                      • Size 2KB
                                      • SHA256 9eccebdbdb61efc0cbd8bccf3a5fedc6f9a1ebe5084b160783f90a56cd1efa7b
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Icon_Light_Available_Yellow.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\128\Icon_Light_Available_Yellow.png
                                      • Size 2KB
                                      • SHA256 c165ef60bf3806cd0a7121a8d6cfd06909fc84b38a07d43e809bd7bff564099c
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Icon_Light_Neutral.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\128\Icon_Light_Neutral.png
                                      • Size 2KB
                                      • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Icon_Light_Active.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\32\Icon_Light_Active.png
                                      • Size 883B
                                      • SHA256 50aa1dcfa9083b57dd6187752b2c149294210be12d263b793d27daf8d431954c
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Icon_Light_Available_Red.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\32\Icon_Light_Available_Red.png
                                      • Size 895B
                                      • SHA256 2278e95b28851ade57217ab5c7b32598c44e1085693a3e26379643d29fa0a6d1
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Icon_Light_Available_Yellow.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\32\Icon_Light_Available_Yellow.png
                                      • Size 895B
                                      • SHA256 726a50a9c008449ab7bafbf21325bfc72093b7ae6a56c5be90cf8c32a8a44641
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Icon_Light_Neutral.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\32\Icon_Light_Neutral.png
                                      • Size 932B
                                      • SHA256 b8e92f9e9b9dc82799231b8d1b57091a9d0bcdd9b54615f86e8c4e4e5c9f036b
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      index.html
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\index.html
                                      • Size 222B
                                      • SHA256 fd21c7ca4637b0221250a14b9fcfb6ebc3b734e659ad80151be4bc579db818f1
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      rules.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\rules.json
                                      • Size 839B
                                      • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      MANIFEST-000001
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\https_gxcorner.games_0.indexeddb.leveldb\MANIFEST-000001
                                      • Size 23B
                                      • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      2ae67227-31b0-4eba-a969-8d99c86cfe00.tmpe90100c5-5c85-4b9b-9500-e7e3863aca98.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\2ae67227-31b0-4eba-a969-8d99c86cfe00.tmpe90100c5-5c85-4b9b-9500-e7e3863aca98.tmp
                                      • Size 27KB
                                      • SHA256 cc914b6c8be70f233d533244b1fe41e32c495b9bb57901a96777f7d19fd75dfa
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      3d75e120-c387-4bf8-88aa-d6cf11df5ad1.tmp6f31d631-15d1-408e-8569-3a12897e22d0.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\3d75e120-c387-4bf8-88aa-d6cf11df5ad1.tmp6f31d631-15d1-408e-8569-3a12897e22d0.tmp
                                      • Size 27KB
                                      • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      60a532ae-16d3-4427-9b14-77a61ad4fe57.tmp61763676-7c26-46b3-b7dd-ea85984fe4c4.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\60a532ae-16d3-4427-9b14-77a61ad4fe57.tmp61763676-7c26-46b3-b7dd-ea85984fe4c4.tmp
                                      • Size 27KB
                                      • SHA256 ad036293bc2f9d442fb3be1c6852e8cd322d80b10ef5d51bd365a87e2ded5679
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      70144804-f2a4-4dbb-be23-3b88c8fbb17c.tmp7efc7726-dcbe-4854-8a31-993f256682d8.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\70144804-f2a4-4dbb-be23-3b88c8fbb17c.tmp7efc7726-dcbe-4854-8a31-993f256682d8.tmp
                                      • Size 27KB
                                      • SHA256 2812a1a85198aa0c3b5170580573935005cbded7ffac283de2da0085f9e83d64
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      a7687783-03f8-44f2-8635-0f8b0172d5e1.tmp1f3a21be-a1cb-442a-afec-9ccf9feb816b.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\a7687783-03f8-44f2-8635-0f8b0172d5e1.tmp1f3a21be-a1cb-442a-afec-9ccf9feb816b.tmp
                                      • Size 27KB
                                      • SHA256 b79b047aa13202f575c92b513e67530ee9a5de4755d8d67c85c2f156c9a4eb39
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      ab5314a7-228d-480b-89c4-8d3d785a8538.tmp863be0dc-4c14-47e3-9881-1807055e79da.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\ab5314a7-228d-480b-89c4-8d3d785a8538.tmp863be0dc-4c14-47e3-9881-1807055e79da.tmp
                                      • Size 27KB
                                      • SHA256 2f1a860dec73e59307d1a8e1b1ace276076ef77008f468720569bfc8d7ba2512
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      f1d6a658-dc22-4ac3-afb0-f6b8bdbd3131.tmp2a4f9c4c-042e-45dc-ade1-55fd4cba9a8e.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\f1d6a658-dc22-4ac3-afb0-f6b8bdbd3131.tmp2a4f9c4c-042e-45dc-ade1-55fd4cba9a8e.tmp
                                      • Size 165KB
                                      • SHA256 6fb99d60d985b95855ae7bdfebe34156f705f865699f31190d0fc15f61d2a8e4
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Network Persistent State
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State
                                      • Size 59B
                                      • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Network Persistent State2216c964-096c-4923-9260-433b02004ebe.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State2216c964-096c-4923-9260-433b02004ebe.tmp
                                      • Size 3KB
                                      • SHA256 647c758f91d97d57345f159a5dfd279d121eb8e3f12cdf6e3a38d08da6b42712
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      SCT Auditing Pending Reports
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\SCT Auditing Pending Reports
                                      • Size 2B
                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      Opera Custom Icon.ico4b172719-f544-4950-8db5-97bd1ea23da4.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Opera Custom Icon.ico4b172719-f544-4950-8db5-97bd1ea23da4.tmp
                                      • Size 162KB
                                      • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                      • Size 12KB
                                      • SHA256 2aa1ea590925787dc70a5dbd12d5f6859ddd61b3fbdacc8ef6c85dc9bcfedc8b
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Preferencesdcadca29-23a8-48da-82e4-b83b1acba4ea.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferencesdcadca29-23a8-48da-82e4-b83b1acba4ea.tmp
                                      • Size 13KB
                                      • SHA256 5f20d8b0b2a11e559f29d61567a77f6c171683ee30c352a15b16aec9296723e3
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Preferencesdefcb2e8-cc48-4b49-9a6b-02430e36b967.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferencesdefcb2e8-cc48-4b49-9a6b-02430e36b967.tmp
                                      • Size 13KB
                                      • SHA256 706b4c38163496842371bf0d1b367a6a9d4fa7d09f1dc4f75c7951bc192fcd98
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Secure Preferences
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
                                      • Size 80KB
                                      • SHA256 98c21b86239f094de93f25a8a8d9467f00dc06056fb291321e930951eb5daa7d
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Secure Preferences63067774-f929-4df9-bbda-07d1a1ea877b.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences63067774-f929-4df9-bbda-07d1a1ea877b.tmp
                                      • Size 120KB
                                      • SHA256 401a8dde5a00819238bbb74b3c1c3457d3fa980cf5e95eb2ed81a6e7de5e14f3
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      index
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index
                                      • Size 24B
                                      • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      temp-index
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                      • Size 648B
                                      • SHA256 156f12c4e19ddfb564f3808f4a8a65f93abda66a73c59d88b23033045ed46083
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      the-real-index
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                      • Size 72B
                                      • SHA256 ce8acdbb40816961194fdc2dc998bab7e3b7dbad2bf06b7fc8fae46a9b25ceb0
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      CURRENT
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Site Characteristics Database\CURRENT
                                      • Size 16B
                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw
                                      • Size 12KB
                                      • SHA256 d31e1a3e894b11d5058ffe0fb26397f47ad3acd158fec22e4532ec5d7932c0e4
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw
                                      • Size 429B
                                      • SHA256 4bd3a1d6bfb892a26477cf9c1134e3ab8f5dbbde3b6e7cb35f898a09df987a6a
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw02f4816f-7df2-44be-98ec-c78872719aab.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw02f4816f-7df2-44be-98ec-c78872719aab.tmp
                                      • Size 1KB
                                      • SHA256 4668f2ca1426a7b0b0bf430341e9ec015e1848db24ef32e7d3c6c201a73e0179
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw0387f90e-02fc-4463-806f-b1569957d2e8.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw0387f90e-02fc-4463-806f-b1569957d2e8.tmp
                                      • Size 9KB
                                      • SHA256 fec99d05624b7ad5e4c5726ca755c155606033136ad13de39db85d6dfe62bfe5
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw0863327c-c085-42cc-81b4-e21e218ec7ee.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw0863327c-c085-42cc-81b4-e21e218ec7ee.tmp
                                      • Size 10KB
                                      • SHA256 dd2aaf33414cf4e615b4b1209d6164b85680627da8b331fa0c9e17ddae2746de
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw08ef544b-e47d-4669-a66e-d5ffc4b45ba7.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw08ef544b-e47d-4669-a66e-d5ffc4b45ba7.tmp
                                      • Size 9KB
                                      • SHA256 092fbc50c7d00d35759b888539e624108fe8edad61f988de13985505151b7ccc
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw0c4362cf-3146-49ff-9777-880ae1de637b.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw0c4362cf-3146-49ff-9777-880ae1de637b.tmp
                                      • Size 1KB
                                      • SHA256 54b644e522647f2b4183fc01a80076859fa56ef41c518dddd5ca4a83ed2b4d3c
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw0c633a46-4a5f-4c5c-8b63-8e30f2675273.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw0c633a46-4a5f-4c5c-8b63-8e30f2675273.tmp
                                      • Size 10KB
                                      • SHA256 8c4db169ad378904688e8a31f3573c42a92585314c525634094d7a09e4480f38
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw0d5ec52e-812a-4a88-acbf-10300cadd804.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw0d5ec52e-812a-4a88-acbf-10300cadd804.tmp
                                      • Size 9KB
                                      • SHA256 c81343663cf03919a6837746ec2093b3f6b7295112a5a7b3954b804c786674ef
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw14fda4ff-84a0-459d-9bf2-f8b0dabc4a98.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw14fda4ff-84a0-459d-9bf2-f8b0dabc4a98.tmp
                                      • Size 797B
                                      • SHA256 62f89eeb9ade34657b12718bb34a296b10c7923ae4ce3165cb0ea543fe04abbe
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw1cc5b6de-d467-4074-aaf7-5658e5ba97f4.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw1cc5b6de-d467-4074-aaf7-5658e5ba97f4.tmp
                                      • Size 1KB
                                      • SHA256 a81a133afb1af74340b28c6f6ced33b22c2e4ed97d6f4550f0eca212b5ca09cf
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw2794f224-371c-445d-903d-4aed71174d6f.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw2794f224-371c-445d-903d-4aed71174d6f.tmp
                                      • Size 973B
                                      • SHA256 25512137090a186fd57544552d5206bbd90e686bb89ce57946bdc9b1b3e84644
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw2b669997-32a2-48a9-9199-c51f4ebad5fc.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw2b669997-32a2-48a9-9199-c51f4ebad5fc.tmp
                                      • Size 1KB
                                      • SHA256 ed2656d7d378a6a22625977c95a046e5e9260ab639558533bf09dd685fa42414
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw2c02f712-7f66-4ef1-bbbe-24b192a966e3.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw2c02f712-7f66-4ef1-bbbe-24b192a966e3.tmp
                                      • Size 3KB
                                      • SHA256 63141f232cd0962b5ce54ae2821002118161e93b540527df2f98c2d8ef55aaa8
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw2f4b793d-26ee-4802-a805-0199d966c811.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw2f4b793d-26ee-4802-a805-0199d966c811.tmp
                                      • Size 2KB
                                      • SHA256 5ebdb33b22c6c9ec6dc7ed4fa655672af88e50886d17ad9523be0aa2b1c6c33b
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw2f810ce6-9be3-41b3-8cb3-c8863f43ae75.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw2f810ce6-9be3-41b3-8cb3-c8863f43ae75.tmp
                                      • Size 10KB
                                      • SHA256 25557771feef027698f035c27a8c4a13ff7a423a0019db48afd2985f9bf946b1
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw38c0adbe-9a85-40f7-9ad1-cc5ef972190c.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw38c0adbe-9a85-40f7-9ad1-cc5ef972190c.tmp
                                      • Size 3KB
                                      • SHA256 89142c86d03d9252afd5a0e037c9404c5b7360a7b735123589dba3cf5c809834
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw3c95cd47-d1b2-474e-bca5-68c54a65086f.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw3c95cd47-d1b2-474e-bca5-68c54a65086f.tmp
                                      • Size 9KB
                                      • SHA256 3257a20f0cbf2c5f4abc1c446a31d010224c32356e34b961874c519d1e0a99f6
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw3e28c314-34db-4638-8153-6a8aca43c9d8.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw3e28c314-34db-4638-8153-6a8aca43c9d8.tmp
                                      • Size 12KB
                                      • SHA256 de28ca4e116f733e735b280bd68defd3b444aa1903f1b26a343a282478a33eb4
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw3ed78bd4-3f70-4025-ae90-ba2462081a95.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw3ed78bd4-3f70-4025-ae90-ba2462081a95.tmp
                                      • Size 11KB
                                      • SHA256 565111b20e729ff581fbe5b7c4c8967a4215841cca78a4b4f9375db333924cf8
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw458ed945-84d3-44a0-b335-93ddd8858263.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw458ed945-84d3-44a0-b335-93ddd8858263.tmp
                                      • Size 9KB
                                      • SHA256 368d009630f1dd49279b697f2ebd185ff57846460175b1a0ebb733ceff7f5e2e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw477d2e97-f2f5-4f88-ae6f-3fea3e195ac2.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw477d2e97-f2f5-4f88-ae6f-3fea3e195ac2.tmp
                                      • Size 541B
                                      • SHA256 7d1321fe06ffe26c0078f6cc10f094eb18d386345ace6cf803847917e510132f
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw4a1b07af-19a2-49b9-a52b-35a81a868f92.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw4a1b07af-19a2-49b9-a52b-35a81a868f92.tmp
                                      • Size 3KB
                                      • SHA256 3a64564fe39601c2be2b5862b1850dde1f38d6421aa0bdbf5e349aecdfd62ffe
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw4ad1c0a2-880c-417a-952b-642ef3db4a77.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw4ad1c0a2-880c-417a-952b-642ef3db4a77.tmp
                                      • Size 9KB
                                      • SHA256 8befc48f243ec9491e173ad75f2fbe7720c650c9cd25177a817e251657e28a72
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw4dc7b2d8-6d5d-4470-a29b-93adac34c5bd.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw4dc7b2d8-6d5d-4470-a29b-93adac34c5bd.tmp
                                      • Size 13KB
                                      • SHA256 f7684e66cd6b3e61cea6e77f4a870ffb12fda14855991b9c6770d92a85470abe
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw548691bf-4ae9-4189-8221-9996810aa53a.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw548691bf-4ae9-4189-8221-9996810aa53a.tmp
                                      • Size 9KB
                                      • SHA256 706b798cb70a8dca116f9d1978e99b2c619d67a54071bfd4e54e50365db7f93f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw586a74ba-1c7f-43f4-ac61-b983ead89c89.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw586a74ba-1c7f-43f4-ac61-b983ead89c89.tmp
                                      • Size 12KB
                                      • SHA256 967fa02bf8e3faca8fa09509cfff7e1f879b67ab0c51182d1bc16b09b2903ec7
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw60ad6306-618b-470f-b92f-d2645d753949.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw60ad6306-618b-470f-b92f-d2645d753949.tmp
                                      • Size 10KB
                                      • SHA256 92155689f73029435dd10d6ab48504b31475707972190ada07f3b681478265ea
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw615db66b-670b-46d4-81cb-9f4d98cb0482.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw615db66b-670b-46d4-81cb-9f4d98cb0482.tmp
                                      • Size 9KB
                                      • SHA256 bc4e8f6d571033fb1838894bb0a0f50dd29273678366f04fcae9cfc5254c8815
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw65e86bdc-3a8f-444a-b05b-bfd74a85b2b4.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw65e86bdc-3a8f-444a-b05b-bfd74a85b2b4.tmp
                                      • Size 9KB
                                      • SHA256 f3490f3ab0fb0f69e6f1e2869296e68be6e143b9fcac34f92e19432cc81695ef
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw66bd7191-37d6-446d-8514-1d47dfcd9ac5.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw66bd7191-37d6-446d-8514-1d47dfcd9ac5.tmp
                                      • Size 13KB
                                      • SHA256 eb0a698dead377bd3721eb06fdea03614eb30f8d53473f8773b65035ee47d0b5
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw67f04b14-225e-44e6-95c3-42b1a0bd8fc9.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw67f04b14-225e-44e6-95c3-42b1a0bd8fc9.tmp
                                      • Size 9KB
                                      • SHA256 a85d0e4506abecd00e30680cc022adb7afd6a852c7970bb8a25752c93d384856
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw694d83cc-00ab-4e71-8ac6-19d6ca5540a5.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw694d83cc-00ab-4e71-8ac6-19d6ca5540a5.tmp
                                      • Size 9KB
                                      • SHA256 766482eda0f8b8020743c71705afed1059e42edb5787e972191eb000088ad56f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw6cb5e77b-53b9-4647-860a-481c44072aef.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw6cb5e77b-53b9-4647-860a-481c44072aef.tmp
                                      • Size 9KB
                                      • SHA256 b5c6d2efc33988fa1bf7303fa91ae300301e1c8b94bb8d4d218b07c26cd6b0ae
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw6cc52657-f7cc-4a14-992e-b33263b8f537.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw6cc52657-f7cc-4a14-992e-b33263b8f537.tmp
                                      • Size 12KB
                                      • SHA256 6a716187c9dadacfa897e609019ca324cc74adebdfd43140fc1738f2c756ddce
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw7278cd58-c1de-4fe7-b45a-9aea195744f7.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw7278cd58-c1de-4fe7-b45a-9aea195744f7.tmp
                                      • Size 10KB
                                      • SHA256 729e55b7512156382bbb862be93b03fbc707a4a3e4dec92a3e5dea55a54839c4
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw759d44ed-852e-4def-9765-ef586a56bd65.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw759d44ed-852e-4def-9765-ef586a56bd65.tmp
                                      • Size 10KB
                                      • SHA256 32f30fe0b3bb742026b44542321f2af0ebd5a68719564b3b75d31615860108db
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw7d2960b7-bc3c-42a7-a166-2d386a77e8ed.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw7d2960b7-bc3c-42a7-a166-2d386a77e8ed.tmp
                                      • Size 3KB
                                      • SHA256 706c50745076dd2369c06c42ebe51b829794e6a6783586d9b87efe0994a99f4a
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw7e588d4d-b1ed-4ec5-89df-31678ab8e7a4.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw7e588d4d-b1ed-4ec5-89df-31678ab8e7a4.tmp
                                      • Size 9KB
                                      • SHA256 a425455fae355fbe253fea260f8bb61e05b0727ba2f518fdfc76184dddfdb56e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw7f8ccfcc-01e7-425b-9d08-9edeadcc5d85.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw7f8ccfcc-01e7-425b-9d08-9edeadcc5d85.tmp
                                      • Size 11KB
                                      • SHA256 d8eb87113d2ed64fffc5092a322ee3c81c8961931e2b9ce1006610b361995d01
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw816524a5-7986-46d5-8c03-07ad02c6e85e.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw816524a5-7986-46d5-8c03-07ad02c6e85e.tmp
                                      • Size 9KB
                                      • SHA256 468a6fc9ead049096d31d3d2c4eeb3de236bb9b09cf583cff0cc35508835e695
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw845667a1-3416-4326-b7c9-64f4e2276d35.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw845667a1-3416-4326-b7c9-64f4e2276d35.tmp
                                      • Size 9KB
                                      • SHA256 48c02616ab5a7dd8456c0f8fa7e8edb1646615aae833af6be9fff4565c51dd20
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw866c4c5b-6278-4c7e-8433-a22abd12fbd5.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw866c4c5b-6278-4c7e-8433-a22abd12fbd5.tmp
                                      • Size 8KB
                                      • SHA256 c6df0d97f5bec5163ee82b2e4f673cc5c1eb0310dab4e10caf181748609d0eca
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw878240b2-4176-4a27-b101-dc17eb47ea32.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw878240b2-4176-4a27-b101-dc17eb47ea32.tmp
                                      • Size 8KB
                                      • SHA256 bca7e9f47784c2b181ef2125b183c103b0d7651828082767d55edd5947e4a756
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw912156cb-7af2-4b19-a300-4d0f776d0109.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw912156cb-7af2-4b19-a300-4d0f776d0109.tmp
                                      • Size 12KB
                                      • SHA256 c42154353adef6d45c95b30db39aa152a3d5e2ac2e5cdb0185e9658bd3eb9d03
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw92989ae8-0c91-4b56-8b67-97f7aec73607.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw92989ae8-0c91-4b56-8b67-97f7aec73607.tmp
                                      • Size 12KB
                                      • SHA256 df74af7585975b5267fa561ab0d2dd527143f54215747203081be254985b3856
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw92a8d5b1-6fd4-40a1-9b51-db6175577ab7.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw92a8d5b1-6fd4-40a1-9b51-db6175577ab7.tmp
                                      • Size 2KB
                                      • SHA256 580b86be630fe797d5a66bc829f8de684f65f92b4c1932d8ae6c5f1e88efc0f7
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw9758ae52-de56-4408-86c6-176a4d387ab1.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw9758ae52-de56-4408-86c6-176a4d387ab1.tmp
                                      • Size 2KB
                                      • SHA256 91eca38b76462a6c4450cd344323add85c0717c4753c0b39ffc5a34d30c14c00
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw9a110854-1f9b-4949-9161-6438db9f5cea.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw9a110854-1f9b-4949-9161-6438db9f5cea.tmp
                                      • Size 11KB
                                      • SHA256 1cc4330cbd66362420b1eb4fb51eaf2b127d7cc4aee7053f25998cd1a7fbee76
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw9afd98bc-af07-4d49-955e-0dcd91a56b47.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw9afd98bc-af07-4d49-955e-0dcd91a56b47.tmp
                                      • Size 12KB
                                      • SHA256 7e88920fdb14f5522af08d6be73d99f7a63225d349ea5108176ec85eff9144cb
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw9c4aa1d6-34f8-4700-a88d-dae866384af0.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw9c4aa1d6-34f8-4700-a88d-dae866384af0.tmp
                                      • Size 9KB
                                      • SHA256 c63cb1fb1f11c4f6303bbc420c8ad0835a8aa4cdbae2ce41c3998bac6e7396bb
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.raw9fd997d9-9d40-461c-9d37-4d1aa7cdb28a.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.raw9fd997d9-9d40-461c-9d37-4d1aa7cdb28a.tmp
                                      • Size 3KB
                                      • SHA256 1b29fc537529b51efed870bfcf48c9a69ec6155862270636c6778af9b34162a0
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawa7e4e23c-2620-4899-a635-4d24f565631b.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawa7e4e23c-2620-4899-a635-4d24f565631b.tmp
                                      • Size 12KB
                                      • SHA256 b502186cdac6ef33b2d766b7e81ed8bae7a57f7f4d5876350f78bbcbc805ecc8
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawac6582cf-0bfe-4291-9907-4acd051734db.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawac6582cf-0bfe-4291-9907-4acd051734db.tmp
                                      • Size 11KB
                                      • SHA256 c7dbf159256f7d49303ad1491d4952c4070afbf519af8e74e45ab5947312e0c0
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawaf2f8171-1e5b-499d-a18a-9543d36d170a.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawaf2f8171-1e5b-499d-a18a-9543d36d170a.tmp
                                      • Size 2KB
                                      • SHA256 9caf083cb1b99f818640f0181f8f8b9129bd2a26bbb1b0a933beef0d685e4828
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawb03af5d9-120a-4ef6-a1a0-da51655c8447.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawb03af5d9-120a-4ef6-a1a0-da51655c8447.tmp
                                      • Size 1KB
                                      • SHA256 6a670ca53b0a2bb6d31aa74bd626fa3546f1c548d19f62f0802533b68ae2a121
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawb1c598fd-1792-44f6-81fa-385d1e718cd7.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawb1c598fd-1792-44f6-81fa-385d1e718cd7.tmp
                                      • Size 3KB
                                      • SHA256 31c9b3edb1c5394cf4f1ad6eeff2d1a7d73ffac5def85f3bb9141527c704346b
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawb570c7d3-12f9-4105-867f-214b878c8847.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawb570c7d3-12f9-4105-867f-214b878c8847.tmp
                                      • Size 2KB
                                      • SHA256 4fc39fc7b35ce290c12a292c3cdb8e4bd7e5562c8c37447427499019fdc488e5
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawc5d1afaa-1654-4468-8332-c6579a9f9529.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawc5d1afaa-1654-4468-8332-c6579a9f9529.tmp
                                      • Size 9KB
                                      • SHA256 77e14facd0fa8a008eb75fe1e749840d083524aca66caf33688752f37deba694
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawc918581f-33c3-4c60-920e-bfff558066f9.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawc918581f-33c3-4c60-920e-bfff558066f9.tmp
                                      • Size 9KB
                                      • SHA256 074153868356fff7b36bf0c11049448b9a8f4d3c01e5a8f1b9579f5354222e3a
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawcf376cc4-b5be-44cc-adee-c051d9f70769.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawcf376cc4-b5be-44cc-adee-c051d9f70769.tmp
                                      • Size 11KB
                                      • SHA256 4ecb14aa76b4cdde57e126456e8c069ecbcbf5fa63c496360c9867fc3b2ffe00
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawd02c07e0-5a50-43f1-9efd-e3d27191d2a1.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawd02c07e0-5a50-43f1-9efd-e3d27191d2a1.tmp
                                      • Size 2KB
                                      • SHA256 44ade009d99f10586eb1b30c5cecb2a6d04b1dc2d0baad2cc9451bc69b790192
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawd8f1ce23-b163-4cef-837a-3d2a1d45331a.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawd8f1ce23-b163-4cef-837a-3d2a1d45331a.tmp
                                      • Size 1KB
                                      • SHA256 e9fc6e1bf3c2c40fab178e74049e6a1f17d4ac0592e6a77d2d8b42f9c342b62e
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawda036c9d-bc6c-40ff-bd40-a124959d3738.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawda036c9d-bc6c-40ff-bd40-a124959d3738.tmp
                                      • Size 3KB
                                      • SHA256 42d50f76f7b3668407f9ec520ceb46828dfacd07b31de9c08757e52851e61fe1
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawdb416fe1-0fef-46e4-82d3-5f9e2eca9b1f.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawdb416fe1-0fef-46e4-82d3-5f9e2eca9b1f.tmp
                                      • Size 10KB
                                      • SHA256 e2d37bf114080f15b8a24e6d67c99093bc09504b6fa5d1a43989bb084cba59d7
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawdcd0edf6-f64a-4c02-bded-a3733588363d.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawdcd0edf6-f64a-4c02-bded-a3733588363d.tmp
                                      • Size 11KB
                                      • SHA256 5cc9b65b98213bbb26cf36dd0497ff173add82154e5ff09f72744b94cbb299b6
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawddee8d0e-fe70-4e8b-a75e-15786b986669.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawddee8d0e-fe70-4e8b-a75e-15786b986669.tmp
                                      • Size 9KB
                                      • SHA256 2a4a752a724fa0a3bacf7c2afcfe931864e9f059deafcea1cd9799d618b3c974
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawde441808-7669-4733-96a7-69e345b26899.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawde441808-7669-4733-96a7-69e345b26899.tmp
                                      • Size 9KB
                                      • SHA256 a244b1ebecad24bfdd680b79194e0cee31d28889b9565c3108fa62dcd5428ab1
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawe05e8e44-2b2d-4aba-8ea2-1f4cd6fabb33.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawe05e8e44-2b2d-4aba-8ea2-1f4cd6fabb33.tmp
                                      • Size 12KB
                                      • SHA256 8b077b2800a51c6cba8ab238590a375dd3fa9883aafe63912de1c9bb9d8a234f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawe0a02954-70b3-48e1-91eb-0e312e936211.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawe0a02954-70b3-48e1-91eb-0e312e936211.tmp
                                      • Size 12KB
                                      • SHA256 1088be36eba056c85eb5b64ea1f645c3fa3de6f4670d99236bd2e0ca22927b8e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawe76272d1-8ef2-4aff-b3dc-7e04513a2f65.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawe76272d1-8ef2-4aff-b3dc-7e04513a2f65.tmp
                                      • Size 10KB
                                      • SHA256 a42fa17bd1ccc3a07349224698c8a23288e4cced80ff3524352aa99c2b5fd19e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawf23ed452-358b-43a7-9492-d4e5101aa113.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawf23ed452-358b-43a7-9492-d4e5101aa113.tmp
                                      • Size 10KB
                                      • SHA256 7ca9f9157adcbe1a0385f0dc872e71eb8666b978cbece0d2f9af757e35176a75
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawf421d5c7-332d-4f76-8e04-858396d11171.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawf421d5c7-332d-4f76-8e04-858396d11171.tmp
                                      • Size 9KB
                                      • SHA256 7b1f042362f69469a93be74c2afd478ebca6b8175d75a5c66d6dfb281a7bf8db
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawfc8199ed-e45e-4fe0-b603-4ba4d89e9256.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawfc8199ed-e45e-4fe0-b603-4ba4d89e9256.tmp
                                      • Size 2KB
                                      • SHA256 e414eb6d62f2779f7577fa60c4eb1f112418e406169444a0f535ef36feb3b762
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawfd4c7744-23bc-4c42-aade-8b668dfbe2ed.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawfd4c7744-23bc-4c42-aade-8b668dfbe2ed.tmp
                                      • Size 13KB
                                      • SHA256 c3012907f644ad0fb1d6d1468e727d014d67d2a4d74b6ea97d620165e3b79a13
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawff103431-4107-42b0-af9f-26ebb68fac0f.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawff103431-4107-42b0-af9f-26ebb68fac0f.tmp
                                      • Size 2KB
                                      • SHA256 4f9e39eaac934e66dd4a313fe9573c99f4af2c6c34666480187f094716b82575
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_d31885a8-da77-4544-a8ab-965686c89ff4.rawffdf608a-dbcc-44f5-b304-56a6569143cb.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_d31885a8-da77-4544-a8ab-965686c89ff4.rawffdf608a-dbcc-44f5-b304-56a6569143cb.tmp
                                      • Size 669B
                                      • SHA256 0464c81344b1ce7b20e35ad974b6e0781a96c6d6ce8f69774d24d9f227a0f434
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      daily_wallpapers.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\daily_wallpapers.json
                                      • Size 4KB
                                      • SHA256 7fdd2937785f48c5518e4cccf5027096f1378046a5cb4e7443819cd6bd2f398b
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      rhs.dat
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\rhs.dat
                                      • Size 107KB
                                      • SHA256 6f7b6f007f424f9e4da217ea7fb4a54edf5da748095a7b9737b546648d322f3c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      spotlight_campaigns.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\spotlight_campaigns.json
                                      • Size 605B
                                      • SHA256 9e816bb0378546ce7789748d0fe618a67cbb2656d024137de32c436de78e7b55
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.1088822313
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.1088822313
                                      • Size 413B
                                      • SHA256 dbc2bacb2d287068d3d7fb9644e52b764c34aa2208c13f725ed6a3f4c04f5f31
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.10888223133275e48c-8968-470a-80fa-fafa5b529ffa.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.10888223133275e48c-8968-470a-80fa-fafa5b529ffa.tmp
                                      • Size 870B
                                      • SHA256 86fe5b9cd9b06671cb97773b5808554e5ce8222a0c0d12b8a8acee48ca457b43
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.108882231336d064c2-2279-4894-a82d-e1c397c9b249.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.108882231336d064c2-2279-4894-a82d-e1c397c9b249.tmp
                                      • Size 2KB
                                      • SHA256 56bde869c87ceaea3dd1697b3cfc3708f02b1bef03c4323cc053cc1217a4294c
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.108882231339272d6b-6714-46aa-98be-669d49abb7ae.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.108882231339272d6b-6714-46aa-98be-669d49abb7ae.tmp
                                      • Size 1KB
                                      • SHA256 e1c66618e8cf44b7822cdf04cf4795fc3ec7e43e25f8104d4a89ca5ee770c117
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.108882231344472c95-1506-41e7-bd89-2782952a4c50.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.108882231344472c95-1506-41e7-bd89-2782952a4c50.tmp
                                      • Size 3KB
                                      • SHA256 0d4f3f8211ca1870bd28a313bbdbafd4c6123795621c9f095187c35c569128b0
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.10888223137ac1b353-0389-4848-a3f3-9eb6a3900b15.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.10888223137ac1b353-0389-4848-a3f3-9eb6a3900b15.tmp
                                      • Size 505B
                                      • SHA256 6abd8afbf9892d675f1a59853b45e3e95e44062ed5787f32a5a4bd5fe89b1290
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.10888223137d02a0ea-c061-4933-b698-3bbc266fc492.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.10888223137d02a0ea-c061-4933-b698-3bbc266fc492.tmp
                                      • Size 1KB
                                      • SHA256 357db528425c16f60fcd5c35ce1e4023ce8dfa9175b4a5ac48e2d995e65748bb
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.108882231383f83476-129d-42ea-a10a-6a7804243a17.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.108882231383f83476-129d-42ea-a10a-6a7804243a17.tmp
                                      • Size 3KB
                                      • SHA256 af21b487760792e349886e68be503d5cc18dd6b99e693ada18660a0881375440
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.10888223139ef15487-f408-4737-91af-05a91d1a53bb.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.10888223139ef15487-f408-4737-91af-05a91d1a53bb.tmp
                                      • Size 1KB
                                      • SHA256 af0a73755f9720e568ef788316ca44c2811829bcaaf46e03c4ceb063948271a2
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.1088822313a33a7567-4c53-4051-8877-46577ecd416e.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.1088822313a33a7567-4c53-4051-8877-46577ecd416e.tmp
                                      • Size 960B
                                      • SHA256 72912ce7b4a1ff592697c2f05df865397431f4e69686d8f9cf51d22b28a54856
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.1088822313b79f255a-8950-4720-88d0-13d4d0de7b0c.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.1088822313b79f255a-8950-4720-88d0-13d4d0de7b0c.tmp
                                      • Size 778B
                                      • SHA256 59b40d02bc089d6d3fc20623e1d41aea40a85ed5aa65bad705678c310dbe9c23
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.1088822313c646f56c-144d-4894-907c-2b15461292d0.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.1088822313c646f56c-144d-4894-907c-2b15461292d0.tmp
                                      • Size 1KB
                                      • SHA256 36b5d6425a27b5d13c2786699a86bf145be02339a5dd95a5206f3b5b6cd65527
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.1088822313d2fbb303-a558-40ed-a555-e1c09626ec42.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.1088822313d2fbb303-a558-40ed-a555-e1c09626ec42.tmp
                                      • Size 598B
                                      • SHA256 d564eaf44473e1a97be96cfafce7b9403e2c4f590780b79964608ba6f65ca108
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.1088822313d3fc68c0-06fe-4654-965f-8d1766054da1.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.1088822313d3fc68c0-06fe-4654-965f-8d1766054da1.tmp
                                      • Size 1KB
                                      • SHA256 d64711a18da84016f1b51d1421b969b40e744affb94f4d17a49ba922f6a3f89c
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.1088822313d5514c92-713b-41f3-822a-3a2ca611beea.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.1088822313d5514c92-713b-41f3-822a-3a2ca611beea.tmp
                                      • Size 3KB
                                      • SHA256 97c4dd303c6319ba1443ba8bb00012a1bd3df34c641f0d80278b7862016497ec
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.1088822313d79a88c5-3671-41e8-854a-3e40ec8300ec.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.1088822313d79a88c5-3671-41e8-854a-3e40ec8300ec.tmp
                                      • Size 2KB
                                      • SHA256 317da4f2440df0bbcc02ea404d49efcae89d4d35a6018a63663d389a4b3549e8
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.1088822313df81a9f1-a140-46b1-819c-038c4a489df4.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.1088822313df81a9f1-a140-46b1-819c-038c4a489df4.tmp
                                      • Size 3KB
                                      • SHA256 db23684a6af9e11bf2a16877e6969ada66f2d272266822975e4311c4b60b164f
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.1088822313e3357ff8-dd87-443a-95fd-2fba3e989cfb.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.1088822313e3357ff8-dd87-443a-95fd-2fba3e989cfb.tmp
                                      • Size 3KB
                                      • SHA256 f462dd7896baf89b2e353cf2070b05d5a689f3fdfd0eb52398bbf7714456dea8
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.1088822313e86e5dcb-0fd6-4013-8bfe-de68b42d4c41.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.1088822313e86e5dcb-0fd6-4013-8bfe-de68b42d4c41.tmp
                                      • Size 1KB
                                      • SHA256 bff8d09d201a3727522b36bb5ecfa471a36a0cd3804dc825fdbd5d0dc76f914b
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.1088822313f0357e0d-a0d2-4353-b89a-080348549a22.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.1088822313f0357e0d-a0d2-4353-b89a-080348549a22.tmp
                                      • Size 3KB
                                      • SHA256 5658162e1643782a4c172836916133bac9feeb9fb10da0d59f9ba0665be47161
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.1088822313f3295546-60d7-4a77-83c5-2a3123c8f575.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.1088822313f3295546-60d7-4a77-83c5-2a3123c8f575.tmp
                                      • Size 687B
                                      • SHA256 5c6bf5eb178bd703d2cf2f48cc0df2a3ac211806a450938208b5fb65dcd6f444
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.1088822313f505d267-b0cb-4350-9934-b61b04e5d0dc.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.1088822313f505d267-b0cb-4350-9934-b61b04e5d0dc.tmp
                                      • Size 1KB
                                      • SHA256 453cd7f28d61da4dcc4936ebbc61d362c973a158e2d3f656048eec162752962f
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.1088822313f636b424-7d24-45d4-a2a1-28198cb9f355.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.1088822313f636b424-7d24-45d4-a2a1-28198cb9f355.tmp
                                      • Size 1KB
                                      • SHA256 e95508ec8081acf2c1a671099e27a31a4cecf26f890ac82a66061135d14210fe
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.0.1088822313fd7e373a-8a0f-448d-a84a-39e0efca0a92.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.0.1088822313fd7e373a-8a0f-448d-a84a-39e0efca0a92.tmp
                                      • Size 3KB
                                      • SHA256 d20e27b718a36605dd2c351ff9825d0cb238730da81dd9f0210dddd88125ef7c
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.1.173253756
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.1.173253756
                                      • Size 171B
                                      • SHA256 0937159545dbdc95af3454c65f29a0b0348323098ca5dd414a205c20e97872aa
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.1.173253756baddb98a-34a0-4799-8d11-98e8be884cd8.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.1.173253756baddb98a-34a0-4799-8d11-98e8be884cd8.tmp
                                      • Size 224B
                                      • SHA256 f5b49b306b40247814de3920a29f9789247095bea83e4dc247286909bde8e520
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3940.1.173253756ddf4903d-128b-491b-9919-0e6cb8ab70e5.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3940.1.173253756ddf4903d-128b-491b-9919-0e6cb8ab70e5.tmp
                                      • Size 200B
                                      • SHA256 a6a42c5c641d63eff81c49288776fd5e968ce499bbbff8e3537082fe120e3b60
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      suggestions_cache.jsond35da2e9-bbd5-4bb9-a781-2d731f446f5f.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\suggestions_cache.jsond35da2e9-bbd5-4bb9-a781-2d731f446f5f.tmp
                                      • Size 794KB
                                      • SHA256 575a8b413031bf1a688edbfbce9ceed8854d2776d9a77a110950170e9fff667f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Local State9677ee32-e5fc-4e22-82fd-06a5d3e895e8.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State9677ee32-e5fc-4e22-82fd-06a5d3e895e8.tmp
                                      • Size 4KB
                                      • SHA256 48d5b39e9e5da0f9828857ea9f8f64ff620318fb5e54402e64956e7f4774b389
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Local Statef5e7202d-3b92-44e8-a3bc-72f5fcd72b7d.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local Statef5e7202d-3b92-44e8-a3bc-72f5fcd72b7d.tmp
                                      • Size 4KB
                                      • SHA256 5d4125a8c6595155542b46b3d455263768f19e34f5ba55f7c5d5339a76a8cdfc
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      manifest.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\MEIPreload\1.1.0.3\manifest.json
                                      • Size 202B
                                      • SHA256 8bd59f33a6e286c7e7352dfaebc9b03cea4e0e959a8ebb2f04b69bd92e107dc1
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      VariationsSafeSeedV27bf8ea05-c42d-411c-8f9d-cb844c9d862e.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\VariationsSafeSeedV27bf8ea05-c42d-411c-8f9d-cb844c9d862e.tmp
                                      • Size 19B
                                      • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      VariationsSeedV27a28724d-6215-44c4-a7d2-88e167652fc6.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\VariationsSeedV27a28724d-6215-44c4-a7d2-88e167652fc6.tmp
                                      • Size 11B
                                      • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      clipboard_injection_guard_rules.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\clipboard_injection_guard_rules.json
                                      • Size 6KB
                                      • SHA256 b8d84b82da3d90323de6cf1b4e3594bf7acb99101c72379b10f4b982f82bd487
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      metadata.json16e912e0-6860-467e-a48b-44c5aab2e1d5.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json16e912e0-6860-467e-a48b-44c5aab2e1d5.tmp
                                      • Size 124B
                                      • SHA256 42dc5689279765d5204eae760cb625510863a8cec862a2375f042ad1b5819351
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      metadata.jsonf3681924-e214-4307-bb78-9044f94bffd5.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\extensions_crx_cache\metadata.jsonf3681924-e214-4307-bb78-9044f94bffd5.tmp
                                      • Size 13B
                                      • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      memory/4348-480-0x00007FFD48C30000-0x00007FFD48C31000-memory.dmp
                                      Download

                                      memory/4348-481-0x00007FFD485D0000-0x00007FFD485D1000-memory.dmp
                                      Download