Overview

overview

8

Static

static

3

OperaGXSetup(3).exe

windows10-2004-x64

8

OperaGXSetup(3).exe

windows11-ltsc_2024-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    23/10/2026, 04:36

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaGXSetup(3).exe
  • Size 4.0MB
  • Sample261023-e8bcfszw4l
  • SHA256 28234ed4c6470b854caa1175399bf8a06117b6cdcbe7d1c9398f488a067a660a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealer

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Writes a Windows system DLL name to a user directory 2 TTPs 2 IoCs

    A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

    defense_evasion
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 57 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 12 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 51 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 20 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 18 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaGXSetup(3).exe
    "C:\Users\Admin\AppData\Local\Temp\OperaGXSetup(3).exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:1228
    • C:\Users\Admin\AppData\Local\Temp\7zSCC4C4509\installer.exe
      C:\Users\Admin\AppData\Local\Temp\7zSCC4C4509\installer.exe --server-tracking-blob=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
      2⤵
      • Downloads MZ/PE file
      • Executes dropped EXE
      • Enumerates connected drives
      • Reads the TCP/IP host and domain name from the registry
      • Enumerates system info in registry
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:6080
      • C:\Users\Admin\AppData\Local\Temp\7zSCC4C4509\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zSCC4C4509\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x2a0,0x2a4,0x2a8,0x27c,0x2ac,0x7ff602e569d8,0x7ff602e569e8,0x7ff602e569f8
        3⤵
        • Executes dropped EXE
        PID:6032
      • C:\Users\Admin\AppData\Local\Temp\.opera\fdd5341b-ae63-4bae-b1b9-9e802353c5f8 Opera GX Installer Temp\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\.opera\fdd5341b-ae63-4bae-b1b9-9e802353c5f8 Opera GX Installer Temp\installer.exe" --version
        3⤵
        • Executes dropped EXE
        PID:4340
      • C:\Users\Admin\AppData\Local\Temp\7zSCC4C4509\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\7zSCC4C4509\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=6080 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\fdd5341b-ae63-4bae-b1b9-9e802353c5f8 Opera GX Installer Temp\opera_package_20261023053621" --session-guid=f71db92b-dd95-4381-a6c3-78cfe923280b --server-tracking-blob=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 --desktopshortcut=1 --wait-for-package --initial-proc-handle=2809000000000000
        3⤵
        • Executes dropped EXE
        • Enumerates connected drives
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:5176
        • C:\Users\Admin\AppData\Local\Temp\7zSCC4C4509\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zSCC4C4509\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x298,0x29c,0x2ac,0x274,0x2b0,0x7ff602e569d8,0x7ff602e569e8,0x7ff602e569f8
          4⤵
          • Executes dropped EXE
          PID:952
        • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe
          "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe" --backend --initial-pid=6080 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\fdd5341b-ae63-4bae-b1b9-9e802353c5f8 Opera GX Installer Temp\opera_package_202610230536211" --session-guid=f71db92b-dd95-4381-a6c3-78cfe923280b --server-tracking-blob=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 --desktopshortcut=1 --install-subfolder=137.0.6036.65
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Modifies registry class
          • Suspicious use of WriteProcessMemory
          PID:1624
          • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x2ac,0x2b0,0x2b4,0x28c,0x2b8,0x7ff7825269d8,0x7ff7825269e8,0x7ff7825269f8
            5⤵
            • Executes dropped EXE
            PID:3328
          • C:\Users\Admin\AppData\Local\Temp\.opera\fdd5341b-ae63-4bae-b1b9-9e802353c5f8 Opera GX Installer Temp\opera_package_202610230536211\assistant\assistant_installer.exe
            "C:\Users\Admin\AppData\Local\Temp\.opera\fdd5341b-ae63-4bae-b1b9-9e802353c5f8 Opera GX Installer Temp\opera_package_202610230536211\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Writes a Windows system DLL name to a user directory
            • Adds Run key to start application
            • System Location Discovery: System Language Discovery
            • Enumerates system info in registry
            • Modifies Internet Explorer settings
            • Suspicious use of WriteProcessMemory
            PID:3520
            • C:\Users\Admin\AppData\Local\Temp\.opera\fdd5341b-ae63-4bae-b1b9-9e802353c5f8 Opera GX Installer Temp\opera_package_202610230536211\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\fdd5341b-ae63-4bae-b1b9-9e802353c5f8 Opera GX Installer Temp\opera_package_202610230536211\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x228,0x250,0x254,0x22c,0x258,0x11fb950,0x11fb95c,0x11fb968
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              PID:3148
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Enumerates system info in registry
              • Suspicious use of WriteProcessMemory
              PID:4628
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x61b950,0x61b95c,0x61b968
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:1116
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Location Discovery: System Language Discovery
                • Enumerates system info in registry
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of SendNotifyMessage
                • Suspicious use of WriteProcessMemory
                PID:1580
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Suspicious use of WriteProcessMemory
                  PID:4536
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9e2548ca8,0x7ff9e2548cb8,0x7ff9e2548cc8
                    9⤵
                    • Executes dropped EXE
                    PID:5364
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  • Suspicious use of WriteProcessMemory
                  PID:4384
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9e2548ca8,0x7ff9e2548cb8,0x7ff9e2548cc8
                    9⤵
                    • Executes dropped EXE
                    PID:4024
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x10f8348,0x10f8354,0x10f8360
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of WriteProcessMemory
                  PID:1220
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:4256
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9e2548ca8,0x7ff9e2548cb8,0x7ff9e2548cc8
                      10⤵
                      • Executes dropped EXE
                      PID:5836
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:1644
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9e2548ca8,0x7ff9e2548cb8,0x7ff9e2548cc8
                      10⤵
                      • Executes dropped EXE
                      PID:3000
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:4236
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9e2548ca8,0x7ff9e2548cb8,0x7ff9e2548cc8
                      10⤵
                      • Executes dropped EXE
                      PID:4540
          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Adds Run key to start application
            • Drops file in Windows directory
            • Reads the TCP/IP host and domain name from the registry
            • Checks processor information in registry
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of WriteProcessMemory
            PID:1456
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9e2548ca8,0x7ff9e2548cb8,0x7ff9e2548cc8
              6⤵
              • Executes dropped EXE
              PID:4880
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1716,i,4770375282650444114,15225536819687640056,262144 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1672 /prefetch:2
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:2492
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=1920,i,3676645631296521501,15024702805807078972,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2112 /prefetch:11
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Reads the TCP/IP host and domain name from the registry
              • System Time Discovery
              PID:2700
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=2512,i,11609615046043072622,11138640177826905559,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2688 /prefetch:13
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:4676
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3064,i,941993552898119715,13191782769202538365,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3120 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:1664
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3084,i,18272548673706587931,6245651873111341918,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3168 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:1552
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3096,i,13818473368886429936,1905021646920216201,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3188 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:2976
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3108,i,2170724357937334178,15673995264065040883,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3208 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5148
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3132,i,5755505159245799496,9162954702506700175,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3228 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5856
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3144,i,5313943487421584577,11202459761038825462,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3248 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:4032
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3900,i,17341375676799831582,12517809146582958619,1572864 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3916 /prefetch:1
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5944
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_gx_splash.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
              6⤵
              • Executes dropped EXE
              PID:2316
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4784,i,9629296944591658981,2726954111751567927,1572864 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4780 /prefetch:1
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:1080
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4948,i,8777769060965889341,6229695549881462947,1572864 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4960 /prefetch:9
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:2256
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4996,i,8827685847089359927,12937352156799708918,1572864 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5132 /prefetch:1
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:3552
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5336,i,7598528574532617748,1728717332952289004,1572864 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5364 /prefetch:1
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:2396
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=5400,i,17046920879846962274,6879370782333262791,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5376 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:2960
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=5160,i,16811023175286545958,18105304309047077984,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5416 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:2288
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=5332,i,1909173462124485223,15161332898743673650,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5500 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:2392
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=5348,i,17739672267056548312,5004810065260703333,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5492 /prefetch:14
              6⤵
              • Executes dropped EXE
              PID:5468
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5960,i,8391127120997066550,5315321964316718839,1572864 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=5968 /prefetch:9
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6160
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6848,i,11502956188026415906,11364979143282549686,1572864 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6888 /prefetch:9
              6⤵
              • Executes dropped EXE
              PID:6344
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6520,i,12460459839759320032,9808939670110488208,1572864 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5620 /prefetch:1
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:2964
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7308,i,16052725091638464003,1628138249524419867,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7296 /prefetch:12
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6512
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
              6⤵
              • Executes dropped EXE
              • Reads the TCP/IP host and domain name from the registry
              • Enumerates system info in registry
              • Suspicious use of WriteProcessMemory
              PID:6268
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x29c,0x2a0,0x2a4,0x270,0x2a8,0x7ff69b99e598,0x7ff69b99e5a8,0x7ff69b99e5b8
                7⤵
                • Executes dropped EXE
                PID:6556
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7932,i,2375390853085164918,1043696338184387566,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7968 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6292
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7924,i,13374187679052976402,13351618799379193111,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=8036 /prefetch:14
              6⤵
              • Executes dropped EXE
              PID:6404
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7984,i,17837673151123366013,857145553489206056,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=8060 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6416
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7992,i,13281382014904658846,2457864251984481419,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=8080 /prefetch:14
              6⤵
              • Executes dropped EXE
              PID:6500
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=8016,i,13134052847870934388,1376899235996783358,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8100 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6428
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=8028,i,3875640252830409242,17096929530292795612,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8120 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6432
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=8928,i,18135155893607778513,5747529728338812971,1572864 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8944 /prefetch:9
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6644
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=8992,i,7342907830006175862,10681504312230768563,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8924 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:4016
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=9100,i,13256118675911310992,9011853723738540656,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=9168 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6508
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=8868,i,15526344863683754419,2843733362701136734,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=9148 /prefetch:14
              6⤵
              • Enumerates system info in registry
              PID:3212
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=9116,i,8484939900098277269,9407045251075927318,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9272 /prefetch:14
              6⤵
                PID:6364
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=9108,i,6207922562294050079,16797884097755596339,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=9204 /prefetch:14
                6⤵
                  PID:6312
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=8888,i,405975666398588293,18227535365778011578,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9252 /prefetch:14
                  6⤵
                  • Enumerates system info in registry
                  PID:6704
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=8896,i,7263238218692375459,235888671699224282,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9228 /prefetch:14
                  6⤵
                    PID:6436
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=10104,i,16994246445324090976,17528076172028067802,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=10100 /prefetch:14
                    6⤵
                      PID:6832
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=10292,i,12706822336088269198,9496455828165158931,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=10252 /prefetch:14
                      6⤵
                        PID:4272
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=10548,i,15653539659373198591,5706868083534706731,1572864 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10556 /prefetch:1
                        6⤵
                        • Enumerates system info in registry
                        PID:6280
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=10688,i,10488229127536668740,9356177707408116958,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10700 /prefetch:14
                        6⤵
                        • Enumerates system info in registry
                        PID:6472
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=10716,i,13642163989631216993,16661942483250964559,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10744 /prefetch:14
                        6⤵
                          PID:6264
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=10920,i,15468227876049453230,14348232735535874352,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10740 /prefetch:14
                          6⤵
                          • Enumerates system info in registry
                          PID:6476
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=10728,i,4231459012998005241,13106489319467474535,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=11068 /prefetch:14
                          6⤵
                            PID:6788
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=11076,i,3484289371627910905,16189965681662946800,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11272 /prefetch:14
                            6⤵
                            • Enumerates system info in registry
                            PID:6920
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=11424,i,2124141836493255255,3734909450664272881,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11432 /prefetch:14
                            6⤵
                              PID:2588
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=11404,i,5087589906956422714,10490737246435848662,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=3912 /prefetch:14
                              6⤵
                                PID:6976
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=5808,i,13047055748035758950,18205410711521987196,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=9404 /prefetch:14
                                6⤵
                                  PID:4212
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3364,i,10330968224214758964,7546425497130591290,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=3440 /prefetch:14
                                  6⤵
                                    PID:6816
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3788,i,10806805380561943788,2476727347611060547,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=3752 /prefetch:14
                                    6⤵
                                    • Enumerates system info in registry
                                    PID:3384
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7992,i,3674678853302830833,887570440643646929,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=8372 /prefetch:14
                                    6⤵
                                    • Enumerates system info in registry
                                    PID:6180
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=11480,i,11119957262130727278,13744585908509564439,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=11492 /prefetch:14
                                    6⤵
                                      PID:4268
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=10448,i,13898653259771612295,13202673326186031955,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=11536 /prefetch:14
                                      6⤵
                                      • Enumerates system info in registry
                                      PID:6804
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3716,i,7810613283695503614,1275946370886290748,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=8568 /prefetch:14
                                      6⤵
                                      • Enumerates system info in registry
                                      PID:4476
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=11472,i,2990323478530066133,13523324617649033764,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=4072 /prefetch:14
                                      6⤵
                                      • Enumerates system info in registry
                                      PID:6756
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3796,i,16692026095441059549,7175068127342931131,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=3808 /prefetch:14
                                      6⤵
                                      • Enumerates system info in registry
                                      PID:7056
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3792,i,6702863108596210341,18397024084453586899,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=5684 /prefetch:14
                                      6⤵
                                        PID:6840
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=8528,i,14927600128952515223,7679078781290233101,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=3764 /prefetch:14
                                        6⤵
                                        • Enumerates system info in registry
                                        PID:2676
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=8128,i,11058030549920283576,9115195940611538134,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=8564 /prefetch:14
                                        6⤵
                                        • Enumerates system info in registry
                                        PID:6752
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=6600,i,1572090337809872628,3117351786458082921,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=7896 /prefetch:14
                                        6⤵
                                        • Enumerates system info in registry
                                        PID:6020
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=5956,i,10342411874875948773,17828092556989394629,1572864 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=6172 /prefetch:9
                                        6⤵
                                        • Enumerates system info in registry
                                        PID:248
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=9404,i,6022371885598511771,5242443025622041999,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=3436 /prefetch:14
                                        6⤵
                                        • Enumerates system info in registry
                                        PID:4216
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3780,i,16467777426425716103,7539001844586705741,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=3080 /prefetch:14
                                        6⤵
                                          PID:1540
                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=5676,i,11491394283298977360,11042195005166877379,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=3396 /prefetch:14
                                          6⤵
                                          • Enumerates system info in registry
                                          PID:6448
                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=5528,i,12436980335730022716,3322138693714228843,1572864 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=3364 /prefetch:9
                                          6⤵
                                          • Enumerates system info in registry
                                          PID:1168
                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=11020,i,7099482357004242854,2841067234372074259,1572864 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=10964 /prefetch:9
                                          6⤵
                                          • Enumerates system info in registry
                                          PID:2116
                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=10156,i,1410174096482530715,13720254804854481590,1572864 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=3488 /prefetch:9
                                          6⤵
                                            PID:7172
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=11672,i,15179331468106630509,4345151259059935055,1572864 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=10464 /prefetch:9
                                            6⤵
                                              PID:7188
                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=3776,i,7061703958648277626,11082740276965734716,1572864 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=10812 /prefetch:9
                                              6⤵
                                              • Enumerates system info in registry
                                              PID:8028
                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=11392,i,12940295525360546111,4951829526115046044,1572864 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=10348 /prefetch:9
                                              6⤵
                                              • Enumerates system info in registry
                                              PID:7352
                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=3460,i,4759860793463993453,15055560530331892543,1572864 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=3484 /prefetch:9
                                              6⤵
                                              • Enumerates system info in registry
                                              PID:7360
                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=3388,i,17166847580091097855,4531183426380857863,1572864 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=10428 /prefetch:9
                                              6⤵
                                                PID:7812
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=6452,i,16764683384569406395,16771774074894871041,1572864 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=11012 /prefetch:9
                                                6⤵
                                                  PID:7980
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=4128,i,10680248288758878066,3988311074587447882,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709056590010169 --mojo-platform-channel-handle=3828 /prefetch:14
                                                  6⤵
                                                  • Enumerates system info in registry
                                                  PID:3272
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gcm-store-self-repair=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=10816,i,7668171357567648486,2506910084527751146,524288 --field-trial-handle=2024,i,6728749783454789777,15095412458496219008,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,7919200520878787877,16562901596496081525,4 --trace-process-track-uuid=3190709057527052018 --mojo-platform-channel-handle=11364 /prefetch:14
                                                  6⤵
                                                    PID:4464
                                            • C:\Users\Admin\AppData\Local\Temp\.opera\fdd5341b-ae63-4bae-b1b9-9e802353c5f8 Opera GX Installer Temp\opera_package_202610230536211\assistant\Opera_GX_assistant_137.0.6036.65_Setup.exe_sfx.exe
                                              "C:\Users\Admin\AppData\Local\Temp\.opera\fdd5341b-ae63-4bae-b1b9-9e802353c5f8 Opera GX Installer Temp\opera_package_202610230536211\assistant\Opera_GX_assistant_137.0.6036.65_Setup.exe_sfx.exe"
                                              3⤵
                                              • Executes dropped EXE
                                              • Writes a Windows system DLL name to a user directory
                                              • System Location Discovery: System Language Discovery
                                              PID:4268
                                            • C:\Users\Admin\AppData\Local\Temp\.opera\fdd5341b-ae63-4bae-b1b9-9e802353c5f8 Opera GX Installer Temp\opera_package_202610230536211\assistant\assistant_installer.exe
                                              "C:\Users\Admin\AppData\Local\Temp\.opera\fdd5341b-ae63-4bae-b1b9-9e802353c5f8 Opera GX Installer Temp\opera_package_202610230536211\assistant\assistant_installer.exe" --version
                                              3⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              • System Location Discovery: System Language Discovery
                                              • Enumerates system info in registry
                                              • Suspicious use of WriteProcessMemory
                                              PID:4396
                                              • C:\Users\Admin\AppData\Local\Temp\.opera\fdd5341b-ae63-4bae-b1b9-9e802353c5f8 Opera GX Installer Temp\opera_package_202610230536211\assistant\assistant_installer.exe
                                                "C:\Users\Admin\AppData\Local\Temp\.opera\fdd5341b-ae63-4bae-b1b9-9e802353c5f8 Opera GX Installer Temp\opera_package_202610230536211\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x11fb950,0x11fb95c,0x11fb968
                                                4⤵
                                                • Executes dropped EXE
                                                • Loads dropped DLL
                                                • System Location Discovery: System Language Discovery
                                                PID:5656
                                        • C:\Windows\system32\svchost.exe
                                          C:\Windows\system32\svchost.exe -k GPSvcGroup
                                          1⤵
                                            PID:4072
                                          • C:\Windows\system32\wbem\unsecapp.exe
                                            C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                            1⤵
                                              PID:5948
                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart
                                              1⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              • Enumerates system info in registry
                                              • Suspicious use of WriteProcessMemory
                                              PID:464
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9e2548ca8,0x7ff9e2548cb8,0x7ff9e2548cc8
                                                2⤵
                                                • Executes dropped EXE
                                                PID:4288
                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
                                              1⤵
                                              • Reads the TCP/IP host and domain name from the registry
                                              • Enumerates system info in registry
                                              PID:6228
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x294,0x298,0x29c,0x280,0x2a0,0x7ff69b99e598,0x7ff69b99e5a8,0x7ff69b99e5b8
                                                2⤵
                                                  PID:6440
                                                • C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe
                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe" --version
                                                  2⤵
                                                    PID:6484

                                                Network

                                                      MITRE ATT&CK Enterprise v16

                                                      Reconnaissance

                                                      Resource Development

                                                      Initial Access

                                                      Execution

                                                      Persistence

                                                      Boot or Logon Autostart Execution

                                                      1
                                                      T1547

                                                      Registry Run Keys / Startup Folder

                                                      1
                                                      T1547.001

                                                      Event Triggered Execution

                                                      1
                                                      T1546

                                                      Component Object Model Hijacking

                                                      1
                                                      T1546.015

                                                      Hijack Execution Flow

                                                      1
                                                      T1574

                                                      DLL Search Order Hijacking

                                                      1
                                                      T1574.001

                                                      Privilege Escalation

                                                      Boot or Logon Autostart Execution

                                                      1
                                                      T1547

                                                      Registry Run Keys / Startup Folder

                                                      1
                                                      T1547.001

                                                      Event Triggered Execution

                                                      1
                                                      T1546

                                                      Component Object Model Hijacking

                                                      1
                                                      T1546.015

                                                      Hijack Execution Flow

                                                      1
                                                      T1574

                                                      DLL Search Order Hijacking

                                                      1
                                                      T1574.001

                                                      Defense Evasion

                                                      Hijack Execution Flow

                                                      1
                                                      T1574

                                                      DLL Search Order Hijacking

                                                      1
                                                      T1574.001

                                                      Masquerading

                                                      1
                                                      T1036

                                                      Match Legitimate Name or Location

                                                      1
                                                      T1036.005

                                                      Modify Registry

                                                      2
                                                      T1112

                                                      Credential Access

                                                      Credentials from Password Stores

                                                      1
                                                      T1555

                                                      Credentials from Web Browsers

                                                      1
                                                      T1555.003

                                                      Unsecured Credentials

                                                      1
                                                      T1552

                                                      Credentials In Files

                                                      1
                                                      T1552.001

                                                      Discovery

                                                      Peripheral Device Discovery

                                                      1
                                                      T1120

                                                      Query Registry

                                                      5
                                                      T1012

                                                      System Information Discovery

                                                      4
                                                      T1082

                                                      System Location Discovery

                                                      1
                                                      T1614

                                                      System Language Discovery

                                                      1
                                                      T1614.001

                                                      System Network Configuration Discovery

                                                      1
                                                      T1016

                                                      System Time Discovery

                                                      1
                                                      T1124

                                                      Lateral Movement

                                                      Collection

                                                      Data from Local System

                                                      1
                                                      T1005

                                                      Command and Control

                                                      Exfiltration

                                                      Impact

                                                      Replay Monitor

                                                      Loading Replay Monitor...

                                                      Downloads

                                                      f_000016
                                                      • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\Cache\Cache_Data\f_000016
                                                      • Size 77KB
                                                      • SHA256 56ced9c310659237d6b5cc37f6acdaa3deadf2b3adeaefef8dd6b285d9e9ccb3
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      data_1
                                                      • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\System Cache\Cache_Data\data_1
                                                      • Size 264KB
                                                      • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                      • MD5 SHA1 SHA512 SSDEEP
                                                      Submit Download

                                                      f_000001
                                                      • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\System Cache\Cache_Data\f_000001
                                                      • Size 215KB
                                                      • SHA256 4c27fc6903f24e9345a2dd9ce36257267ee9313f146ea6a2d110c9f70e67040a
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      snapshot-new.baf
                                                      • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\System Cache\No_Vary_Search\snapshot-new.baf
                                                      • Size 20B
                                                      • SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
                                                      • MD5 SHA1 SHA512
                                                      Submit Download

                                                      137.0.6036.65.manifest
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\137.0.6036.65.manifest
                                                      • Size 225B
                                                      • SHA256 4fc3f11f18f24cddf8ba040c914a1cace41e81eee15f34d4143a4be785bbb28a
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      150x150Logo.scale-100.png
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-100.png
                                                      • Size 2KB
                                                      • SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      150x150Logo.scale-100_contrast-white.png
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-100_contrast-white.png
                                                      • Size 1KB
                                                      • SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      150x150Logo.scale-140.png
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-140.png
                                                      • Size 3KB
                                                      • SHA256 a36a13a5d5e3d39e3018ccc5f8859944c87256f8be24a3c08a6bf3cb06a26804
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      150x150Logo.scale-140_contrast-white.png
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-140_contrast-white.png
                                                      • Size 2KB
                                                      • SHA256 0bd63fe653885286e180fbdf6d1dadc66af242b8ed6bd1d03d8c5eccc20e91d7
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      150x150Logo.scale-180.png
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-180.png
                                                      • Size 3KB
                                                      • SHA256 6a8f64754c75edcc9abc1138e44acbd7064d7e8e2a28783939241dbd6afa30a5
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      150x150Logo.scale-180_contrast-white.png
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-180_contrast-white.png
                                                      • Size 3KB
                                                      • SHA256 a706b332e6a846357a86c30d0e8bb7697e7dd55c2ae592dd45611ddce0c0bf14
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      150x150Logo.scale-80.png
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-80.png
                                                      • Size 1KB
                                                      • SHA256 7e6b0d9ea7fda1b5ca7a0b01290521dff943da4cbf1498412ca7d749db42c32d
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      150x150Logo.scale-80_contrast-white.png
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-80_contrast-white.png
                                                      • Size 1KB
                                                      • SHA256 dfd1054f989cdee25f19ea792f363f042a125cab537a424f0224bbee13607e39
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      70x70Logo.scale-100.png
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\70x70Logo.scale-100.png
                                                      • Size 1KB
                                                      • SHA256 a333d7e4293f5269426b3fcb673a284f3708a66f957de62403b6570b24bae8f5
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      70x70Logo.scale-100_contrast-white.png
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\70x70Logo.scale-100_contrast-white.png
                                                      • Size 1KB
                                                      • SHA256 ebbe0b4761ea8968a0a3fafb383ac7ae175e98cd31a0f41bdf5fcb43469b58ec
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      70x70Logo.scale-140.png
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\70x70Logo.scale-140.png
                                                      • Size 1KB
                                                      • SHA256 207519f1c7b6c7509bfeb7b55724997eec6456c8baf55e882e72fc5cd43da221
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      70x70Logo.scale-140_contrast-white.png
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\70x70Logo.scale-140_contrast-white.png
                                                      • Size 1KB
                                                      • SHA256 464afaf960c32abdc2c3937a48bf14c5d1a819b017e719fded591d43a65d94c4
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      70x70Logo.scale-180.png
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\70x70Logo.scale-180.png
                                                      • Size 2KB
                                                      • SHA256 d6367dbc074e37f3488c26b0bad229bfe99f5c6bb0e28d37b41906c436152b57
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      70x70Logo.scale-180_contrast-white.png
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\70x70Logo.scale-180_contrast-white.png
                                                      • Size 2KB
                                                      • SHA256 5d46e4056f3915c279f1fa9edf61d93529fbcae5c59d616380ec5d9405b7763d
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      70x70Logo.scale-80.png
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\70x70Logo.scale-80.png
                                                      • Size 1KB
                                                      • SHA256 dc20e5aa2b500cd5b5c9f89647d3487810685c94268f22678e27820e2454bb3e
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      70x70Logo.scale-80_contrast-white.png
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\70x70Logo.scale-80_contrast-white.png
                                                      • Size 901B
                                                      • SHA256 dd6f46d32c3e235508f9e4c7d7f993bd807d955bca7e63cf3d57c6c4c102f46d
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      CChromaEditorLibrary64.dll
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\CChromaEditorLibrary64.dll
                                                      • Size 145KB
                                                      • SHA256 0fbf0cf98ea7033ebe90018190db609fb6b3be3df36dbde0cd468928da2ccae3
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      CUESDK.x64_2017.dll
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\CUESDK.x64_2017.dll
                                                      • Size 474KB
                                                      • SHA256 d07154c8a9182617f229885aa03b0580a2cbc58ab5781c09392a93abf901e37f
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      assistant_package
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\assistant_package
                                                      • Size 4.0MB
                                                      • SHA256 2150fd26a7218ffe0eec80ecd9edec98bfdbbb2dd6c2107120cdd0c751b03b43
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      d3dcompiler_47.dll
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\d3dcompiler_47.dll
                                                      • Size 4.5MB
                                                      • SHA256 2332e7038319484f84e8670ec0d3554211ac22c42a2dc5e7471714479d28171e
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      dxcompiler.dll
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\dxcompiler.dll
                                                      • Size 24.6MB
                                                      • SHA256 62ea4285f09a5976fb886cbb36dd355e110a2ba32a5c97f2dfdaa40143493f63
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      dxil.dll
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\dxil.dll
                                                      • Size 1.4MB
                                                      • SHA256 13f78cd54a51a006e514f9e497f26f10b767b2c3f25bb2de6c9f09256fa45b76
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      files_list
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\files_list
                                                      • Size 4KB
                                                      • SHA256 af11c273044e6a7e57486d761b24e317a15362c885442c9e1beab5ad1be54717
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      headless_command_resources.pak
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\headless_command_resources.pak
                                                      • Size 2KB
                                                      • SHA256 e1f2ec7189570bec91b544cd289af7af3dfe03d4694634068d7ae3ce200792f1
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      icudtl.dat
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\icudtl.dat
                                                      • Size 10.4MB
                                                      • SHA256 7377adaf7f3aa2170098bd2bc144ee5f8b9677a206b54ce93c0ec392b0a6abea
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      installer.exe
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe
                                                      • Size 9.2MB
                                                      • SHA256 f79b9723e62a3cb69b94cbd762edc2eb94ddefa1d79823d760a0c5fd0299ccd7
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      installer_helper_64.exe
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer_helper_64.exe
                                                      • Size 606KB
                                                      • SHA256 d580b8b100f1f3beef5bc354fa2136e9a0df8b676af4c832f0051abc2620a105
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      libEGL.dll
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\libEGL.dll
                                                      • Size 454KB
                                                      • SHA256 5bca02817a6476fd69f2b292e1a440a809fc44ebc9170ff540cd406b75d23211
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      libGLESv2.dll
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\libGLESv2.dll
                                                      • Size 454KB
                                                      • SHA256 bfb09902c6209510d8531b6491755c10a15ebb5f9f1cacb02e1220adfa560530
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      bg.pak
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\localization\bg.pak
                                                      • Size 995KB
                                                      • SHA256 c9ac1578585dc2f69f14939b8809893c5949a102f37e782c35d89496323afd7f
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      bn.pak
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\localization\bn.pak
                                                      • Size 1.2MB
                                                      • SHA256 734a1effeb04a9208f007efec4253e23cc89491204557ae9aba3a7d85775ac33
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      ca.pak
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\localization\ca.pak
                                                      • Size 628KB
                                                      • SHA256 e5fc3e0390f04533092294939756cc054f333a731f269a4f9a5f3fff3557e4ca
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      cs.pak
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\localization\cs.pak
                                                      • Size 627KB
                                                      • SHA256 83b93e114cb334ef87d7a5a46bd34dd7b4f21846b42293e29c3e21c431101ab1
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      da.pak
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\localization\da.pak
                                                      • Size 575KB
                                                      • SHA256 f867df2e90cfacd2f3c0c77ff1b522feb4b5c4fab3277cadb36cd26597c758fb
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      de.pak
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\localization\de.pak
                                                      • Size 624KB
                                                      • SHA256 f54d2e1cda529186782d0c6ff2f988e0e410a76958bc6e10ca2dd9d41527fc5a
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      el.pak
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\localization\el.pak
                                                      • Size 1.1MB
                                                      • SHA256 fa0d7d4b9c9c522fd96634c8a4760398eebb4ffc6b2aeedd76d2440be1588a20
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      en-GB.pak
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\localization\en-GB.pak
                                                      • Size 506KB
                                                      • SHA256 c276b31839a86ca14a4c040b80e3208329961dcd619485876e4def1c63ac3e06
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      en-US.pak
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\localization\en-US.pak
                                                      • Size 510KB
                                                      • SHA256 e23b7966aae1a943fcfc4a5d87728e61c4e32717d7da3ce71adde98ceb45a5a2
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      es-419.pak
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\localization\es-419.pak
                                                      • Size 616KB
                                                      • SHA256 84a38effc1c8130f8a9c120dc535c346566064120c2e70a16a5f6f222d0fd669
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      es.pak
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\localization\es.pak
                                                      • Size 610KB
                                                      • SHA256 e6e86d0c6b69053cc5a5fded23f924f17ef98b39dbc40e0d59e311f9d1352ecb
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      installer_prefs.json5f20596f-f1a3-440b-8774-138934668d7b.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json5f20596f-f1a3-440b-8774-138934668d7b.tmp
                                                      • Size 2KB
                                                      • SHA256 8ae264168be98a37325e43388cbbca88622859829ad46f646f896eb6a9039889
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      Opera GX Browser.lnk
                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\fdd5341b-ae63-4bae-b1b9-9e802353c5f8 Opera GX Installer Temp\opera_package_202610230536211\Opera GX Browser.lnk
                                                      • Size 1KB
                                                      • SHA256 f36d30d5655076b65e191a530889386cc25d31b0de4919a69e1261b8b155f047
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      additional_file1.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\fdd5341b-ae63-4bae-b1b9-9e802353c5f8 Opera GX Installer Temp\opera_package_202610230536211\additional_file1.tmp
                                                      • Size 3.2MB
                                                      • SHA256 cd8129a92e34618206b386216a307a768ba8770cb76b4c16a08b35ac23c1228d
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      assistant_installer.exe
                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\fdd5341b-ae63-4bae-b1b9-9e802353c5f8 Opera GX Installer Temp\opera_package_202610230536211\assistant\assistant_installer.exe
                                                      • Size 2.5MB
                                                      • SHA256 d1bebcbda51c7869eebf33275e4b6c3d2b3d37df6fae74a0561cdf2dffb5b293
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      dbgcore.DLL
                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\fdd5341b-ae63-4bae-b1b9-9e802353c5f8 Opera GX Installer Temp\opera_package_202610230536211\assistant\dbgcore.DLL
                                                      • Size 238KB
                                                      • SHA256 65a487c32b2b0fdb5a022a7ed54dcf6b6f8271985d50c45c432fc8acb1bdf115
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      dbghelp.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\fdd5341b-ae63-4bae-b1b9-9e802353c5f8 Opera GX Installer Temp\opera_package_202610230536211\assistant\dbghelp.dll
                                                      • Size 589KB
                                                      • SHA256 2ec4dcc1209a7f59c9215c5d8f17d7b35a91b2faf84d63ca5666cb6b02e46050
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      installer_prefs_include.json
                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\fdd5341b-ae63-4bae-b1b9-9e802353c5f8 Opera GX Installer Temp\opera_package_202610230536211\installer_prefs_include.json
                                                      • Size 816B
                                                      • SHA256 0f9e6daef7f8e66c8cbc9aade8322c86e3065f6b656906c42af593674604e699
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      installer_prefs_include.json1aadbd49-e9f8-4630-9485-56cb31325f49.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\fdd5341b-ae63-4bae-b1b9-9e802353c5f8 Opera GX Installer Temp\opera_package_202610230536211\installer_prefs_include.json1aadbd49-e9f8-4630-9485-56cb31325f49.tmp
                                                      • Size 831B
                                                      • SHA256 8d2529e320d219fc5ecb8ead9a3273fcd46001ef1ae6d0996709c2d2c96e73c7
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      installer_prefs_include.json83fbac6c-43b3-43ef-9617-e49ea8c6775e.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\fdd5341b-ae63-4bae-b1b9-9e802353c5f8 Opera GX Installer Temp\opera_package_202610230536211\installer_prefs_include.json83fbac6c-43b3-43ef-9617-e49ea8c6775e.tmp
                                                      • Size 1KB
                                                      • SHA256 30a5b46d200473e86894af3d4768a73c882bf6d05db0d24603b1efa71957c0e3
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      custom_partner_content.json
                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\fdd5341b-ae63-4bae-b1b9-9e802353c5f8 Opera GX Installer Temp\opera_package_202610230536211\resources\custom_partner_content.json
                                                      • Size 245KB
                                                      • SHA256 84bc1efb211c6b45f2906278a36f1414922f994a9611bbee7713ffd4ae21e967
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      7587e4e7-9fb4-43c9-972e-d4af71a3fb5d.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Temp\7587e4e7-9fb4-43c9-972e-d4af71a3fb5d.tmp
                                                      • Size 14KB
                                                      • SHA256 99dfb50b062db90ac585e2a877192973b88522ceb257a78345f1f1ca5da98e1b
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      installer.exe
                                                      • Path C:\Users\Admin\AppData\Local\Temp\7zSCC4C4509\installer.exe
                                                      • Size 9.2MB
                                                      • SHA256 407955bd8dc43601214a22c6696f6db8da9352eb0c13b38fbeb780a90755fc52
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      9107d708-de3d-45f7-911f-4c3193e43a68.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Temp\9107d708-de3d-45f7-911f-4c3193e43a68.tmp
                                                      • Size 3.0MB
                                                      • SHA256 5c8953fdd4f8a848a8711f749b4bf85376836da9a065b7bdd887e5d03f44cfd8
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      966da2a0-c366-47fd-8c70-65159261f6f4.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Temp\966da2a0-c366-47fd-8c70-65159261f6f4.tmp
                                                      • Size 1.4MB
                                                      • SHA256 a75f68026cc1314a842f2b95800dd32a2c8792824be753ef40720af6beab58c2
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      a65621f2-6d78-4c61-b934-9adc3d7be7e7.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Temp\a65621f2-6d78-4c61-b934-9adc3d7be7e7.tmp
                                                      • Size 3.5MB
                                                      • SHA256 9d645b0ce032688d4f3100cd1f1d178d3c2c9d04bb691144659b98b4931d8eef
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      b5d1be14-eb63-4059-875b-12cbd7133a0c.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Temp\b5d1be14-eb63-4059-875b-12cbd7133a0c.tmp
                                                      • Size 472KB
                                                      • SHA256 4b9b79291aca9c45d54ae238655f41b7a0eecb0b80fb3d172cd0b1d75e712540
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      f29837ad-ffd0-45ff-963f-bc132c6754b4.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Temp\f29837ad-ffd0-45ff-963f-bc132c6754b4.tmp
                                                      • Size 46KB
                                                      • SHA256 176a736c95c08746480a0e25f7acf323d502d0f6aac4b4dfbeb2713513af8a52
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      favicon_opera_one.png
                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1456_1516256652\CRX_INSTALL\favicon_opera_one.png
                                                      • Size 2KB
                                                      • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      logo_128.png
                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1456_1769209382\CRX_INSTALL\public\icons\logo_128.png
                                                      • Size 7KB
                                                      • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      logo_16.png
                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1456_1769209382\CRX_INSTALL\public\icons\logo_16.png
                                                      • Size 653B
                                                      • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      logo_32.png
                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1456_1769209382\CRX_INSTALL\public\icons\logo_32.png
                                                      • Size 1KB
                                                      • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      logo_48.png
                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1456_1769209382\CRX_INSTALL\public\icons\logo_48.png
                                                      • Size 2KB
                                                      • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      logo_64.png
                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1456_1769209382\CRX_INSTALL\public\icons\logo_64.png
                                                      • Size 2KB
                                                      • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      messages.json
                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1456_421974421\CRX_INSTALL\_locales\en\messages.json
                                                      • Size 2KB
                                                      • SHA256 13f83e7ad61d853293597de9e7583e7724680b7c80c31d0834097f2a7022741a
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      sidebar-icon-57.png
                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1456_66312800\CRX_INSTALL\icons\sidebar-icon-57.png
                                                      • Size 914B
                                                      • SHA256 47814ebe57fa54280f03a94a13f582ff7b781fd7362c797117cc2e6ae388a160
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      messages.json
                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1456_869955482\CRX_INSTALL\_locales\en\messages.json
                                                      • Size 396B
                                                      • SHA256 1bcb4888a65788a50ed88f4bd95955d1dafdc950b5ef4609b37f42934a4bf3b9
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      Icon_Light_Neutral.png
                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1456_869955482\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                      • Size 2KB
                                                      • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      Icon_Light_Neutral.png
                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1456_869955482\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
                                                      • Size 962B
                                                      • SHA256 e8adb8a9dcca121a1853749ebef122b84a995ebf8775cd27b0dd54bab9840bd1
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      19d6af486512df3e.customDestinations-ms
                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\19d6af486512df3e.customDestinations-ms
                                                      • Size 22KB
                                                      • SHA256 ae52daedc544f027bad274ee5c1cd68c374627da086407341fd1eaa875e5e8ec
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      DVCA1RID8Z2SVP8ATXT9.temp
                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DVCA1RID8Z2SVP8ATXT9.temp
                                                      • Size 22KB
                                                      • SHA256 937a6eb0f8bb92a474b2b9a95bd65219555ebbb655a8420c6774a6eabc3cb247
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      E6T42WTZHBP5VO22VYC3.temp
                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\E6T42WTZHBP5VO22VYC3.temp
                                                      • Size 22KB
                                                      • SHA256 9fee6658f0500e6ca22da8160b50197b1c151744aeba8ebc3e3c54d8174bdf7a
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      settings.dat
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                                      • Size 40B
                                                      • SHA256 4c298bfbbce190a45205da0937475fb490c20e3db34dc674ae181b928f256d42
                                                      • MD5 SHA1 SHA512
                                                      Submit Download

                                                      Bookmarks
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Bookmarks
                                                      • Size 20KB
                                                      • SHA256 2695e81bd743b5fc2f5a9b977e39b2f805bb37a142fd10962bf8e97ddca4f683
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      Bookmarks30f83174-dc90-437d-bb5f-666ef045bdaa.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Bookmarks30f83174-dc90-437d-bb5f-666ef045bdaa.tmp
                                                      • Size 22KB
                                                      • SHA256 797593b5bdc36dc7ab8ec7be98548c9d740382ba06e23903e36fa14d08dad610
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      Bookmarks4cc762dd-a82a-404c-86b2-ca1109bacb85.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Bookmarks4cc762dd-a82a-404c-86b2-ca1109bacb85.tmp
                                                      • Size 23KB
                                                      • SHA256 2c9ed239ebc9c058e1860c0a90d733c64fad7789ca1ccf196a64c5d087750d23
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      the-real-index
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                      • Size 48B
                                                      • SHA256 fdb003d9360b4d4b978f4a8bfd44debd1727ad30044ab4fe1ae4d657f08f81d4
                                                      • MD5 SHA1 SHA512
                                                      Submit Download

                                                      the-real-index
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                      • Size 1KB
                                                      • SHA256 53b221712fbbdbf0cae9a03c045184cd9ce87cf7585975751c084410dfb2e07f
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      data_0
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_0
                                                      • Size 8KB
                                                      • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                      • MD5 SHA1 SHA512 SSDEEP
                                                      Submit Download

                                                      data_2
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_2
                                                      • Size 8KB
                                                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                      • MD5 SHA1 SHA512 SSDEEP
                                                      Submit Download

                                                      data_3
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_3
                                                      • Size 8KB
                                                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                      • MD5 SHA1 SHA512 SSDEEP
                                                      Submit Download

                                                      MANIFEST-000001
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\MANIFEST-000001
                                                      • Size 41B
                                                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                      • MD5 SHA1 SHA512
                                                      Submit Download

                                                      messages.json
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\_locales\en\messages.json
                                                      • Size 2KB
                                                      • SHA256 57e2b257a65fa5e980c619214ed9ae25580bbd581143e28abac49928b31977a6
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      background.js
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\background.js
                                                      • Size 17KB
                                                      • SHA256 c7a162a7650887dffe12034ddbba5ddb91ca5bf4f5478f59ded324f7e088bacb
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      twitch.png
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch.png
                                                      • Size 677B
                                                      • SHA256 959a810529fcf478d40d02fc418e6223e38bdeba0deae8e83b55028d47bbef6b
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      twitch16.png
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch16.png
                                                      • Size 370B
                                                      • SHA256 6534efc770a8a32c881258029c2f2b9d9f1b75228f53bf9b4cd2b9a9689884e0
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      twitch48.png
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch48.png
                                                      • Size 921B
                                                      • SHA256 47e37c0726206401cc69cb6ab0fdda79b364356a5e2fdbd5ce479bfbb965f245
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      colors.js
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\colors.js
                                                      • Size 5KB
                                                      • SHA256 80cc31214c554212050ac62dd04bdb33b012b3b42634ef16f461aca2dc8572fb
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      preferences.js
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\preferences.js
                                                      • Size 4KB
                                                      • SHA256 424634b7911f5002d426d9455139bfe578e0a3d8143a4b5f23597ffc22ec0923
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      stats.js
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\stats.js
                                                      • Size 1KB
                                                      • SHA256 f2b7e0086a62415550738764edbd98a22ed7524623343b4276951b8cb2207b52
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      twitch_api.js
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\twitch_api.js
                                                      • Size 4KB
                                                      • SHA256 db2f7f893c141525ecb33ce344471ef44dd457980f1fe138a91759d556b4a002
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      volume.js
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\volume.js
                                                      • Size 1KB
                                                      • SHA256 3a30f4a95a4ca688fafa4c5594c039bbba5e5d14187dd1da286e48387d3e3d7e
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      main.js
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.9_0\main.js
                                                      • Size 48KB
                                                      • SHA256 c2d961a8340848930aa0b7141ec03b973639d119756904d35fc8efe1a4cb8ec7
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      3ebfaf1c4dcf4f3b0255.ttf
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\2.0.0_0\3ebfaf1c4dcf4f3b0255.ttf
                                                      • Size 316KB
                                                      • SHA256 5ae3965ae20c8090af12aeafec6882ef41829397f28f554e89fbabdf9069ea7e
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      background.js
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\2.0.0_0\background.js
                                                      • Size 561KB
                                                      • SHA256 4761b2a40e2d0da01ab6e2fc7a22694d4964cf6738347874d6c9a8f7797b66e7
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      compact.html
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\2.0.0_0\compact.html
                                                      • Size 967B
                                                      • SHA256 aa4fe5f4f3ba3c9525f26863bd96d8193068e4fb0d7c1a10cea08af3107a39ad
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      sidebar-icon-57.png
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\2.0.0_0\icons\sidebar-icon-57.png
                                                      • Size 878B
                                                      • SHA256 f933e3885645efb79fb9c683c14d58a6c324162f7f79c1b2550caeecce708cb2
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      popup.css
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\2.0.0_0\popup.css
                                                      • Size 85KB
                                                      • SHA256 e923156474b883000789d5293e0f6fd5719b463c3d4d804d6419af21bee1e682
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      scraping-method-Dq4mm50p.js
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\scraping-method-Dq4mm50p.js
                                                      • Size 6KB
                                                      • SHA256 99c8d4f76ebc9fc6cea115065570a12d41903c93e18c1c6385b5b2e70256eb70
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      service-worker.ts-fle0M1Xd.js
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\service-worker.ts-fle0M1Xd.js
                                                      • Size 13KB
                                                      • SHA256 4ebb6cb9c3f033302d6a8c31329009082bafeab73c39cca179511b5a972ba8f8
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      service-worker-loader.js
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\service-worker-loader.js
                                                      • Size 49B
                                                      • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                      • MD5 SHA1 SHA512
                                                      Submit Download

                                                      1196.js
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\1196.js
                                                      • Size 155KB
                                                      • SHA256 bcfbdb2e6b4172d12b0a34c35983ff6b6e7618cb83ee153f835aca07da70eb8c
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      4032.js
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\4032.js
                                                      • Size 23KB
                                                      • SHA256 59c4efc8651a7b080120ae078fce1ac17f42c9cebebb71cb9f5380dcac9a169e
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      4505.js
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\4505.js
                                                      • Size 443KB
                                                      • SHA256 11af1029768b2991bdbf766aa7db050a766ef7f0a37815c45c9bede78a08a4de
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      5345.js
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\5345.js
                                                      • Size 89KB
                                                      • SHA256 753ed393955ce21fc727702f0322ee6cac894e382af168720607d079e8a89502
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      649.js
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\649.js
                                                      • Size 11KB
                                                      • SHA256 b0fdc98099d5d4d8bdc43eddccacef4a0ab5d3b373aeb2342fce2c728981d66d
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      7565.js
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\7565.js
                                                      • Size 39KB
                                                      • SHA256 a7d9547c5fb459762cb200f1e021dfc0efc9c08297c5349f8599dbafdf2dbb18
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      8116.js
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\8116.js
                                                      • Size 41KB
                                                      • SHA256 8bacfc8b500836ab9415b32b7f3c4c172addf76525bef9a73e2cd84c753e39f8
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      blacklist.js
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\blacklist.js
                                                      • Size 76KB
                                                      • SHA256 cf129d43fd65f2c93eafc53ad899911737aab73564fbec7bdac87b5b0788400e
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      favicon_opera_one.png
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\favicon_opera_one.png
                                                      • Size 2KB
                                                      • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      reader_mode.js
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\reader_mode.js
                                                      • Size 112KB
                                                      • SHA256 ebb002d9d7d9206bc39d3f44bae6e49b7d694a172a0b1da9934f49c17f433084
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      service_worker.js
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\service_worker.js
                                                      • Size 1.1MB
                                                      • SHA256 055406577738ff3eac762b7d2e7360bac21acf0bb688d829d0acfb9126993de2
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      spotify_frame_interceptor.js
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\spotify_frame_interceptor.js
                                                      • Size 5KB
                                                      • SHA256 f25cc540e5212f9f327bfb16702e156d385aa2545bd1b4c572f6a5543d4e7930
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      messages.json
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\_locales\en\messages.json
                                                      • Size 429B
                                                      • SHA256 c6a7161359e3c4fbc4059b7209c585f9aa2306c08e6c39a3003f4b29f2ceb22d
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      background.js
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\background.js
                                                      • Size 105KB
                                                      • SHA256 9a9b0f7b3070d6f47773e487ebf53134c7629c15c4564ca613c3c9a8077b543d
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      content.js.LICENSE.txt
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\content.js.LICENSE.txt
                                                      • Size 1KB
                                                      • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      Icon_Light_Active.png
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\128\Icon_Light_Active.png
                                                      • Size 2KB
                                                      • SHA256 97d9553a4f725354a6d5c3eff11f31285fd89c3b150593f04785b83d0a56efc2
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      Icon_Light_Available_Red.png
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\128\Icon_Light_Available_Red.png
                                                      • Size 2KB
                                                      • SHA256 9eccebdbdb61efc0cbd8bccf3a5fedc6f9a1ebe5084b160783f90a56cd1efa7b
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      Icon_Light_Available_Yellow.png
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\128\Icon_Light_Available_Yellow.png
                                                      • Size 2KB
                                                      • SHA256 c165ef60bf3806cd0a7121a8d6cfd06909fc84b38a07d43e809bd7bff564099c
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      Icon_Light_Neutral.png
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\128\Icon_Light_Neutral.png
                                                      • Size 2KB
                                                      • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      Icon_Light_Active.png
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\32\Icon_Light_Active.png
                                                      • Size 883B
                                                      • SHA256 50aa1dcfa9083b57dd6187752b2c149294210be12d263b793d27daf8d431954c
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      Icon_Light_Available_Red.png
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\32\Icon_Light_Available_Red.png
                                                      • Size 895B
                                                      • SHA256 2278e95b28851ade57217ab5c7b32598c44e1085693a3e26379643d29fa0a6d1
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      Icon_Light_Available_Yellow.png
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\32\Icon_Light_Available_Yellow.png
                                                      • Size 895B
                                                      • SHA256 726a50a9c008449ab7bafbf21325bfc72093b7ae6a56c5be90cf8c32a8a44641
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      Icon_Light_Neutral.png
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\32\Icon_Light_Neutral.png
                                                      • Size 932B
                                                      • SHA256 b8e92f9e9b9dc82799231b8d1b57091a9d0bcdd9b54615f86e8c4e4e5c9f036b
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      index.html
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\index.html
                                                      • Size 222B
                                                      • SHA256 fd21c7ca4637b0221250a14b9fcfb6ebc3b734e659ad80151be4bc579db818f1
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      rules.json
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\rules.json
                                                      • Size 839B
                                                      • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      MANIFEST-000001
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\chrome-extension_jifbgnmbgbdiedhdecealmlgmekpagde_0.indexeddb.leveldb\MANIFEST-000001
                                                      • Size 23B
                                                      • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                      • MD5 SHA1 SHA512
                                                      Submit Download

                                                      1485abd4-87d6-4d41-8d02-d3c2b64b1a92.tmpc91dce5c-6d09-444a-b02c-797725e9149e.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\1485abd4-87d6-4d41-8d02-d3c2b64b1a92.tmpc91dce5c-6d09-444a-b02c-797725e9149e.tmp
                                                      • Size 27KB
                                                      • SHA256 ad036293bc2f9d442fb3be1c6852e8cd322d80b10ef5d51bd365a87e2ded5679
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      2d0f24b8-5cd6-4690-a570-936f889788fe.tmp9294657c-bd13-473a-81f4-6a42c505a372.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\2d0f24b8-5cd6-4690-a570-936f889788fe.tmp9294657c-bd13-473a-81f4-6a42c505a372.tmp
                                                      • Size 27KB
                                                      • SHA256 2f1a860dec73e59307d1a8e1b1ace276076ef77008f468720569bfc8d7ba2512
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      49346ee4-c803-48a7-810f-bd7554c4db17.tmpcd8a449f-3b27-4163-b5a9-a24eece7cbdd.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\49346ee4-c803-48a7-810f-bd7554c4db17.tmpcd8a449f-3b27-4163-b5a9-a24eece7cbdd.tmp
                                                      • Size 27KB
                                                      • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      6756838c-7d4a-4ea5-889c-643652f78552.tmpe4b502b2-f598-47c9-a7f8-ffde5feef5b0.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\6756838c-7d4a-4ea5-889c-643652f78552.tmpe4b502b2-f598-47c9-a7f8-ffde5feef5b0.tmp
                                                      • Size 27KB
                                                      • SHA256 06fad05c51b9041e1eee874086a13075af058630a44e160890f8ad6cc52cd6d6
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      67ff1418-c8ce-438d-be8c-d668634ec3b7.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\67ff1418-c8ce-438d-be8c-d668634ec3b7.tmp
                                                      • Size 27KB
                                                      • SHA256 cc914b6c8be70f233d533244b1fe41e32c495b9bb57901a96777f7d19fd75dfa
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      a2935b7f-c48f-400a-b6a7-a1d49ce94a67.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\a2935b7f-c48f-400a-b6a7-a1d49ce94a67.tmp
                                                      • Size 27KB
                                                      • SHA256 b79b047aa13202f575c92b513e67530ee9a5de4755d8d67c85c2f156c9a4eb39
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      bc8d1933-6913-4aad-b8a4-f4eabe6e157c.tmp8f909066-1de6-4c44-aa09-372df550b416.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\bc8d1933-6913-4aad-b8a4-f4eabe6e157c.tmp8f909066-1de6-4c44-aa09-372df550b416.tmp
                                                      • Size 27KB
                                                      • SHA256 2812a1a85198aa0c3b5170580573935005cbded7ffac283de2da0085f9e83d64
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      Network Persistent State
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State
                                                      • Size 59B
                                                      • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      Network Persistent State
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State
                                                      • Size 3KB
                                                      • SHA256 a2be24cc91c3dc990d4c1b0aa3ef0fba934630ed9b7656f3960e3b00f2e3c39d
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      SCT Auditing Pending Reports
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\SCT Auditing Pending Reports
                                                      • Size 2B
                                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                      • MD5 SHA1 SHA512
                                                      Submit Download

                                                      Opera Custom Icon.ico74eb0509-6792-4f81-b6a9-7268cbdc0811.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Opera Custom Icon.ico74eb0509-6792-4f81-b6a9-7268cbdc0811.tmp
                                                      • Size 162KB
                                                      • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      Preferences
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                      • Size 12KB
                                                      • SHA256 b550a8514ba5d5f63ed266278e5efeaf2089fa42bc6fc63de24d02ca289ade5c
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      Preferences4a0639f1-b4b6-4fb4-8bcc-475c593e7866.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences4a0639f1-b4b6-4fb4-8bcc-475c593e7866.tmp
                                                      • Size 13KB
                                                      • SHA256 dec3e26f59d692a3c2fe3aa49405e441097c632c8ad496793c5761f228739f22
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      Preferencesc05cf669-d778-495d-a61b-0864ab78c163.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferencesc05cf669-d778-495d-a61b-0864ab78c163.tmp
                                                      • Size 13KB
                                                      • SHA256 0687ac7c7337d157341bb6f0e9a791bcc2504711cba38365c7bdeb886fd5dea9
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      Secure Preferences
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
                                                      • Size 80KB
                                                      • SHA256 1ebf363376c26308246b545e20d68bc0be013360ff756b914e04f4e281643831
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      Secure Preferences51ae7dd4-49e8-4652-b0e2-df77f2537ecf.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences51ae7dd4-49e8-4652-b0e2-df77f2537ecf.tmp
                                                      • Size 120KB
                                                      • SHA256 1b0825230d206b7298bbecde09fcef8e47514f41106ec4b500cec94805900d0a
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      index
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index
                                                      • Size 24B
                                                      • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                      • MD5 SHA1 SHA512
                                                      Submit Download

                                                      temp-index
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                      • Size 648B
                                                      • SHA256 0a456f4b806794c9531f8e580607e208d06a8c709fcf705e979094eb2a9fb311
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      the-real-index
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                      • Size 72B
                                                      • SHA256 e4ba311bb1ff583e760c1f1465f723aec14e602eac38eeec192419cc909bc647
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw
                                                      • Size 429B
                                                      • SHA256 f789ef76c800183e8eff079739bffa980bd9194f86cd1c56840bc5184c648c0c
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw
                                                      • Size 1KB
                                                      • SHA256 490158c392d27fc0dd78476a492ccc36ad96c8524bf7c52204b5ffedb98fbf33
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw
                                                      • Size 10KB
                                                      • SHA256 551300c386990c889296db882ac742cf71f6afbc02be7d37b2b4e007721a79b5
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw0321846b-0dcb-40b0-9f87-027c18cfe6db.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw0321846b-0dcb-40b0-9f87-027c18cfe6db.tmp
                                                      • Size 11KB
                                                      • SHA256 6731dd49fc6aa3bc7e87112806deb2b56404070e25866660c00cc4e866be59fa
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw13be215c-d548-493d-a4de-1b68a2e9f8c1.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw13be215c-d548-493d-a4de-1b68a2e9f8c1.tmp
                                                      • Size 11KB
                                                      • SHA256 f7f51e69ce370a591b27141e9fbad460b5786db9b3766f3db57986c498a20c26
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw14a24390-83f5-4496-a9ab-5ce171fbf23b.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw14a24390-83f5-4496-a9ab-5ce171fbf23b.tmp
                                                      • Size 12KB
                                                      • SHA256 14b9ffc8b40e71cad0ae25a8258db143f3b266097a3855440fab656a6979f5de
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw1c388573-f0c1-4985-a024-299a59b06a89.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw1c388573-f0c1-4985-a024-299a59b06a89.tmp
                                                      • Size 9KB
                                                      • SHA256 0b1944862d0756b3f84a78f3a38fb09ac8dc1e7be14a50d6ca30b85f8492cd12
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw1e67b734-3b8d-43d2-a829-1436a6758f28.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw1e67b734-3b8d-43d2-a829-1436a6758f28.tmp
                                                      • Size 9KB
                                                      • SHA256 48f99c3002a73b1c388341dfdc75e17407536d4337c18500cf1d35f1679df9cd
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw1f8e8123-d721-4b79-b122-6779ccf05864.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw1f8e8123-d721-4b79-b122-6779ccf05864.tmp
                                                      • Size 9KB
                                                      • SHA256 5b3b1ea1979cc500d1c2b4d89863ea03b636f8dbd8f7bb71fac0fce2a4fcc343
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw2052440b-101e-4c13-ac9a-9c4853c1d763.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw2052440b-101e-4c13-ac9a-9c4853c1d763.tmp
                                                      • Size 9KB
                                                      • SHA256 ea55c973cc7d16e840e796dfe16f83c75efac258b183608221373e8ef1fbc19f
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw2633a83a-7d5f-408d-af35-8eefbc62aa55.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw2633a83a-7d5f-408d-af35-8eefbc62aa55.tmp
                                                      • Size 12KB
                                                      • SHA256 ab121d295aeef60d2aa2376a464f3cd609f50fb38d1ee738329ced4ef93e9e3a
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw288e79f8-8ec2-4374-8ede-18400a9bf317.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw288e79f8-8ec2-4374-8ede-18400a9bf317.tmp
                                                      • Size 10KB
                                                      • SHA256 914eae28ec4deb371d943be0f7c57bd5f67fd8a62c17941d30470ffd60947b8a
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw36d6cc1a-e683-4317-8c66-d8854b0e128b.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw36d6cc1a-e683-4317-8c66-d8854b0e128b.tmp
                                                      • Size 2KB
                                                      • SHA256 bf6afd3c0ca63f776ec05eca83f77b395429299ff655c7baa3903751b5631a85
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw36e7366f-d0b9-4f78-9ae6-4fb66fd90b3a.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw36e7366f-d0b9-4f78-9ae6-4fb66fd90b3a.tmp
                                                      • Size 3KB
                                                      • SHA256 c3aa1af6789b914534788538ae5acbbdde3fe3d13b9a7f06c57a2ff904d6ba4a
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw39e06ff4-76cf-49d3-9284-2f5d529f0ab2.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw39e06ff4-76cf-49d3-9284-2f5d529f0ab2.tmp
                                                      • Size 1KB
                                                      • SHA256 76ea4567f010465d51f5fceec6a1f21a492aaf08a9269d1bab848548322a0996
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw3bd6b786-365b-42ca-9da0-9a1a5c1ac337.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw3bd6b786-365b-42ca-9da0-9a1a5c1ac337.tmp
                                                      • Size 9KB
                                                      • SHA256 ba5323dcee46a7c383ee3f4ea69f57edb950cfb221d5e5f54698749ec7067ca5
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw3be67b00-87eb-49a7-b2e6-4277bae3e261.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw3be67b00-87eb-49a7-b2e6-4277bae3e261.tmp
                                                      • Size 973B
                                                      • SHA256 6f3f7b104a670c8a1cbedd42180a82aeff04d99a49f57bce4793fe333312671b
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw3c8bca84-6edc-4d46-ac63-0546a763c2d1.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw3c8bca84-6edc-4d46-ac63-0546a763c2d1.tmp
                                                      • Size 10KB
                                                      • SHA256 b7c5ec373b4e11b1de120fc270ff32d23f621fb485566ab0c2dabef61ee26f26
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw3d36b63c-d4be-496e-8e3f-1c4232f1857e.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw3d36b63c-d4be-496e-8e3f-1c4232f1857e.tmp
                                                      • Size 11KB
                                                      • SHA256 6a52ea2e8c3f43ec7a8dea6fb4415de096a436d42e4c632e13ed3ba5535bb2a6
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw447554f3-1adf-4cd6-870c-e03f316e73f1.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw447554f3-1adf-4cd6-870c-e03f316e73f1.tmp
                                                      • Size 2KB
                                                      • SHA256 3e78ef12883321b3ad534dcc3928a38694aa19f2017dda44bc846ff1885aeedd
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw494758f0-90ff-4649-b5e4-e3c0da78035d.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw494758f0-90ff-4649-b5e4-e3c0da78035d.tmp
                                                      • Size 8KB
                                                      • SHA256 4701d70d22d1b7f3972339fa1b35af2a296ad4d388bb58261242ff4bc25b449f
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw4977085d-4445-40f0-ac15-1536576645c8.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw4977085d-4445-40f0-ac15-1536576645c8.tmp
                                                      • Size 1KB
                                                      • SHA256 6369b95c19f3429ebff11d4f7c8dcc2c86f54c2ec44d7739627636e1953f62f9
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw4b46277e-5001-48ac-b8a2-8eb2ad41ec36.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw4b46277e-5001-48ac-b8a2-8eb2ad41ec36.tmp
                                                      • Size 9KB
                                                      • SHA256 17aeb9ac78913539401e11d5ef26b62e37b2ea61824bf90cc3e83e4c519d7766
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw4e926afe-7dcf-45f7-ae08-66b0ee487d66.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw4e926afe-7dcf-45f7-ae08-66b0ee487d66.tmp
                                                      • Size 12KB
                                                      • SHA256 28887125886aa72891f8cdb46e61b96872d26edf9f115b7af79f218681b22f55
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw584c65d1-a757-43dd-9c34-311d3f369fd8.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw584c65d1-a757-43dd-9c34-311d3f369fd8.tmp
                                                      • Size 12KB
                                                      • SHA256 e3bd6e04a4e1b8f2947fee5625b6ffe10d0f0a9a1ae603688d67d03a871a41b8
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw5e172e75-9b4a-499b-9ad9-ca8babacb9c0.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw5e172e75-9b4a-499b-9ad9-ca8babacb9c0.tmp
                                                      • Size 12KB
                                                      • SHA256 e8799b800bd22b3fcf8d0fe0670eeacce85f7f516103f98bef0bbdecbd147d95
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw6752fc80-0b37-4c8d-86cf-069ccedcf147.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw6752fc80-0b37-4c8d-86cf-069ccedcf147.tmp
                                                      • Size 3KB
                                                      • SHA256 a42d1466c83cb86745b190961e18ff0fbf423db97282f62ce689c4f10e6e7c23
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw67a6d0f0-6e3a-45da-ab04-4d50b449f1da.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw67a6d0f0-6e3a-45da-ab04-4d50b449f1da.tmp
                                                      • Size 8KB
                                                      • SHA256 04afb113b55e2ce978cce78001de2ae3fed835259c3d862212402bbf1dc0ba18
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw6bf5d234-25ae-48ce-85a2-1539ba026d20.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw6bf5d234-25ae-48ce-85a2-1539ba026d20.tmp
                                                      • Size 8KB
                                                      • SHA256 484eeacdae900e863c752c9a7116f69e0b48b7c1a7c56024c952310bf2730d31
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw71602dff-4a68-429f-b032-90d9784e2a6c.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw71602dff-4a68-429f-b032-90d9784e2a6c.tmp
                                                      • Size 12KB
                                                      • SHA256 dde0bb312eb72a976f59db6ac1c710a4f3d28097e23c86e6fcac1511e30921bd
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw72466011-4067-42bd-9705-acdeac55aea6.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw72466011-4067-42bd-9705-acdeac55aea6.tmp
                                                      • Size 9KB
                                                      • SHA256 22127304bfbf04a7ca835c417107c16ed5479f6a3e26efd9d42c06e0f5b9e349
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw7637a7aa-28c1-4c66-8ecc-ba25d6e8adf6.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw7637a7aa-28c1-4c66-8ecc-ba25d6e8adf6.tmp
                                                      • Size 9KB
                                                      • SHA256 de2cc973856a4f9fea6542be82dc781ba00b37305fe028cc8577a5aa738c0a5e
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw7c819f1d-852c-4b20-9bec-01c0b5e837a0.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw7c819f1d-852c-4b20-9bec-01c0b5e837a0.tmp
                                                      • Size 11KB
                                                      • SHA256 371b9bd3baaf33775c326d62f43c22d0dd7cf4828f486d47a747ee5b7d4f3b56
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw81e32d9c-620c-4200-9513-849964c9d3a1.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw81e32d9c-620c-4200-9513-849964c9d3a1.tmp
                                                      • Size 3KB
                                                      • SHA256 7e1ad49fca07d1b43f79f88417e1447aad10a730ea42d4ebd4a8df7f1d1b578b
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw82bf4c7b-5ac5-49ac-a845-f9a4c5e98df8.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw82bf4c7b-5ac5-49ac-a845-f9a4c5e98df8.tmp
                                                      • Size 8KB
                                                      • SHA256 9cd1ff593387076cc884a31f105d2896ee113d512c0a4a0225b520e8fa72ad64
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw84a2fb0c-86dc-4e12-9bf1-096c21bb504b.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw84a2fb0c-86dc-4e12-9bf1-096c21bb504b.tmp
                                                      • Size 11KB
                                                      • SHA256 105278da1d1f5ab2e69d27c73cd434814332b397686fca32b37a7fb207b5b792
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw8511bf9b-a4ea-42c1-8200-075414fd203f.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw8511bf9b-a4ea-42c1-8200-075414fd203f.tmp
                                                      • Size 2KB
                                                      • SHA256 ed39b65caac3ff64619928435856f25f4c5ca4d479ad744df029387516353cc2
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw8af4952e-c48d-43a7-80af-2bb40fceb013.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw8af4952e-c48d-43a7-80af-2bb40fceb013.tmp
                                                      • Size 9KB
                                                      • SHA256 e2d3a83ce65a10ff4f49c9eec2760fdcadd1e3c9a54fd8076bc085cdd7ee2bd3
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw8b10bb05-b8b1-4cf4-b8a0-560a3195d0cc.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw8b10bb05-b8b1-4cf4-b8a0-560a3195d0cc.tmp
                                                      • Size 9KB
                                                      • SHA256 cab758bf22e7481e21aa710ecb784acfba6872f750846017fbe25d5e7d587d8d
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw91a427d2-8ebe-4a75-9310-f528232f82a1.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw91a427d2-8ebe-4a75-9310-f528232f82a1.tmp
                                                      • Size 12KB
                                                      • SHA256 72c516cd2df86dbb71a03d9872c685b99de9d3a2af9c3655fba125ceb9da0f76
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw91fc54eb-4557-4f0d-a7d4-ccdb453e49af.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw91fc54eb-4557-4f0d-a7d4-ccdb453e49af.tmp
                                                      • Size 2KB
                                                      • SHA256 27a7481f07cd93769cde764036513a49c2305d4b9a2925f4d7d4313eba4f813c
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw945b9a97-30f2-4a07-80bc-d74b4cbbe1de.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw945b9a97-30f2-4a07-80bc-d74b4cbbe1de.tmp
                                                      • Size 1KB
                                                      • SHA256 d50bb2e24581d666d5bcf85e9494042222b9b29a105ca579ec3f0eaddaa416d1
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw95476d2f-ba3e-4002-b00c-6a2e38dbacea.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.raw95476d2f-ba3e-4002-b00c-6a2e38dbacea.tmp
                                                      • Size 11KB
                                                      • SHA256 05a2d659f7d5aef775da9bf94455c286a575d12b6308b444aba16dfa4ed2bafd
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawa194e4ad-e7a3-47bf-8b8a-000d0d597b6d.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawa194e4ad-e7a3-47bf-8b8a-000d0d597b6d.tmp
                                                      • Size 12KB
                                                      • SHA256 48fa65ded226b8e899b4ae25591f9dcd07482693fdc67432bfa0e61b900779cf
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawa3639214-720b-49d7-a68e-c7e95f5e4094.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawa3639214-720b-49d7-a68e-c7e95f5e4094.tmp
                                                      • Size 1KB
                                                      • SHA256 3a8ed83e51e257857ed14e46e1855035434e9c9562571c0a3d8370b04c306379
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawa45f81fd-b057-47c1-b7e5-afbe2249b473.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawa45f81fd-b057-47c1-b7e5-afbe2249b473.tmp
                                                      • Size 9KB
                                                      • SHA256 ad27918445a5ed6b786e460e815697b2c3b2675a2c50d25c88c0b1580c738aad
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawa57aa1b5-e73f-46e2-9078-fb33cb66f6a8.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawa57aa1b5-e73f-46e2-9078-fb33cb66f6a8.tmp
                                                      • Size 12KB
                                                      • SHA256 8cde098611cb13e37bdb7d05a0053e63fb5815394f171282e02c441a1ba13d9d
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawa9b386c9-e3ac-4429-96be-debe38cda6d1.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawa9b386c9-e3ac-4429-96be-debe38cda6d1.tmp
                                                      • Size 2KB
                                                      • SHA256 b2172d1e68c466fd3d6e015a931f200b2c776b5fb53c9eab35b345fe3a9dd1e8
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawaca977a0-d382-4676-89d4-a246125b09ed.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawaca977a0-d382-4676-89d4-a246125b09ed.tmp
                                                      • Size 9KB
                                                      • SHA256 7d5f641e350a19dd3513b7e141c86290a2133863ff41b19da9943fdf1f604bb1
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawae0d0d37-44c7-4a2e-ad50-ea3355b23ce1.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawae0d0d37-44c7-4a2e-ad50-ea3355b23ce1.tmp
                                                      • Size 9KB
                                                      • SHA256 85e1760da8c195f01301cccc660f52581067c95766865ef9883a2ad3be1e481a
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawaefe6f7f-71f8-49b9-ba9f-a613e8d4fc35.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawaefe6f7f-71f8-49b9-ba9f-a613e8d4fc35.tmp
                                                      • Size 11KB
                                                      • SHA256 ebde0a4182012a120687a9ccbdf3dd744bf9754c55ae9249d9cccc765cf509d8
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawb10b4d67-92b7-4ad7-9f3c-712052b06873.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawb10b4d67-92b7-4ad7-9f3c-712052b06873.tmp
                                                      • Size 11KB
                                                      • SHA256 2d2efd56796e0d00d99e141fad1b052a86a25a2f19c7ca2c528e6cad311d5938
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawb64ff015-c644-49ce-937d-265b67243af2.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawb64ff015-c644-49ce-937d-265b67243af2.tmp
                                                      • Size 2KB
                                                      • SHA256 be8cf0efce77005d2531e7d8c3dc06f547a87dfba5d85ad70225992d7ac21638
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawbc640c9c-5824-4310-84f0-60aca815f5de.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawbc640c9c-5824-4310-84f0-60aca815f5de.tmp
                                                      • Size 9KB
                                                      • SHA256 828bad19b547390281c84289b211f2f1e5ea29b11f59021884d66ffedc036d11
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawbe2bf39d-ca0d-4276-8859-3e08e5b981a6.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawbe2bf39d-ca0d-4276-8859-3e08e5b981a6.tmp
                                                      • Size 1KB
                                                      • SHA256 e8e96911434380e0306176009ef8c9fd0f4c7fdcdcc5c9610f3ef161ecb0e6bf
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawbee5a00f-a3e7-4e69-b36a-b78eff891ecd.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawbee5a00f-a3e7-4e69-b36a-b78eff891ecd.tmp
                                                      • Size 8KB
                                                      • SHA256 664bd96bf711f34abff79c56891c77e2b66001eaf9521915858787ccc1aa0215
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawc09f493e-0b50-41ba-b4f0-f04188cab04a.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawc09f493e-0b50-41ba-b4f0-f04188cab04a.tmp
                                                      • Size 9KB
                                                      • SHA256 873e54088339fc4cbdc62a6b73b60cbe0c7592b7d75c493dba607c4efd54e0c0
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawc93e6daf-c2eb-4e05-a01b-3a9f4b88eea1.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawc93e6daf-c2eb-4e05-a01b-3a9f4b88eea1.tmp
                                                      • Size 2KB
                                                      • SHA256 64a318d7cce592c459ec4a8786496446019b9f83fce123e35b621393c4422834
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawcb9cefe1-3566-448b-8845-1347029d0fdc.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawcb9cefe1-3566-448b-8845-1347029d0fdc.tmp
                                                      • Size 2KB
                                                      • SHA256 96d890f31754383de3f35fadbefb6f8a10fd9e6048f6effe8d4d589024d99dd4
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawcce50fc0-cb70-4a5f-8d51-ff89b4d08785.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawcce50fc0-cb70-4a5f-8d51-ff89b4d08785.tmp
                                                      • Size 541B
                                                      • SHA256 0d81d2e9773775938c2ddb9d93c03f2e5f8e947c47aece403a8cf47a7d912f84
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawdbbe7ad2-3cfa-4798-94bd-de16e45544ef.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawdbbe7ad2-3cfa-4798-94bd-de16e45544ef.tmp
                                                      • Size 9KB
                                                      • SHA256 bff851427e72677dfa2b54e9b92ace886d826a2e471e82ebf6104747d0171fff
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawe01a8e26-f74f-4900-81e3-d79252f82623.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawe01a8e26-f74f-4900-81e3-d79252f82623.tmp
                                                      • Size 10KB
                                                      • SHA256 b35e3eb4eb66ac3b0fc7cc77f3a7b82b7191da2c46dd9eb4877e616197055499
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawe3fdb189-e26d-47b7-8b77-3d818ebb40d3.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawe3fdb189-e26d-47b7-8b77-3d818ebb40d3.tmp
                                                      • Size 9KB
                                                      • SHA256 56ea1a560beb8c8e799191b9f6b6c7a1f88d74e7b345aa7f1381a7b16d481251
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawe4f5bdc6-c8a4-4e1e-a272-fda34f621939.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawe4f5bdc6-c8a4-4e1e-a272-fda34f621939.tmp
                                                      • Size 9KB
                                                      • SHA256 2f46f58fcb8a9659533d115e2f1d8259dda2beaa3158dcaae71e3d6e06f9eff6
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawe517d925-f467-42b5-b819-5e3d18cfad4a.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawe517d925-f467-42b5-b819-5e3d18cfad4a.tmp
                                                      • Size 10KB
                                                      • SHA256 fadacab97b12d99930dab0632b0bb39dad81beaf83e04511ba7967c3feb64e25
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawe9d20bd1-49e2-47f7-ae0e-b4a91f7281cd.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawe9d20bd1-49e2-47f7-ae0e-b4a91f7281cd.tmp
                                                      • Size 669B
                                                      • SHA256 a22fb3c040779ad4a8ca065b3ad53f501b08b3d292c2c43b8aa10708c28caac1
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawefb53fdb-bd43-4d78-a2bf-be5e516c95e7.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawefb53fdb-bd43-4d78-a2bf-be5e516c95e7.tmp
                                                      • Size 3KB
                                                      • SHA256 16d20701b7f0e0515d6446546c87b0751d464b8c0f9555d4a6b6ccabb1e78056
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawf11b78e7-3945-4d26-922e-c5225dfc5faa.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawf11b78e7-3945-4d26-922e-c5225dfc5faa.tmp
                                                      • Size 11KB
                                                      • SHA256 0c43cd2d29eec86773173e3da19efea3b524f1490330183b38561d59e495294e
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawf35659d9-a9ff-4fd3-9695-4ccf61aac5c9.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawf35659d9-a9ff-4fd3-9695-4ccf61aac5c9.tmp
                                                      • Size 9KB
                                                      • SHA256 716003991ca5fa4e27a25791a8e618236975d49fff9b0507d41990b12cb5ba1d
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawf3d56cb9-b3b6-4a30-9149-b1a4c34d7271.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawf3d56cb9-b3b6-4a30-9149-b1a4c34d7271.tmp
                                                      • Size 781B
                                                      • SHA256 d238d5bd8f5e7eebfb37327f94f828130706f3673f135de17b7d11a99f6ddddb
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawf7307527-b216-4c2f-802a-8ec965785a6d.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawf7307527-b216-4c2f-802a-8ec965785a6d.tmp
                                                      • Size 9KB
                                                      • SHA256 5c648d2f2004122b316483fd558f45cca2077cfce437619094adaa6da1b7b5e3
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawf7c66b39-4aae-4a24-8399-3358b2dd27df.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawf7c66b39-4aae-4a24-8399-3358b2dd27df.tmp
                                                      • Size 9KB
                                                      • SHA256 e577faba4112978575a1e98bb0ca9f14bc390efa1322ec06d4cfb34eb07f05ea
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawf8ddb91a-2f37-4392-abc3-417e4891c4c4.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_22130d0e-237d-4fd3-858d-d1b7f984f72c.rawf8ddb91a-2f37-4392-abc3-417e4891c4c4.tmp
                                                      • Size 8KB
                                                      • SHA256 fba16b5bb20605db4a582cf73ce75da318cfab2b0af910b380e94200c23e2c35
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      CURRENT
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Sync Data\LevelDB\CURRENT
                                                      • Size 16B
                                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                      • MD5 SHA1 SHA512
                                                      Submit Download

                                                      daily_wallpapers.json
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\daily_wallpapers.json
                                                      • Size 4KB
                                                      • SHA256 7fdd2937785f48c5518e4cccf5027096f1378046a5cb4e7443819cd6bd2f398b
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      rhs.dat
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\rhs.dat
                                                      • Size 107KB
                                                      • SHA256 6f7b6f007f424f9e4da217ea7fb4a54edf5da748095a7b9737b546648d322f3c
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      spotlight_campaigns.json
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\spotlight_campaigns.json
                                                      • Size 605B
                                                      • SHA256 9e816bb0378546ce7789748d0fe618a67cbb2656d024137de32c436de78e7b55
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.172803218
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.172803218
                                                      • Size 414B
                                                      • SHA256 5a2a80fde85a76055cc35d76861bd0e5cf5decfe431522c89bafa056dcc08e8b
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.172803218085191d9-f580-4bb7-adac-1a790fffee5e.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.172803218085191d9-f580-4bb7-adac-1a790fffee5e.tmp
                                                      • Size 691B
                                                      • SHA256 2b8b3169a09bdb38f9792cc898c29b7721f813e0f40f6710e07614b59843b7ce
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.1728032181ac5f0be-d321-420b-93a3-22b1455d16cd.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.1728032181ac5f0be-d321-420b-93a3-22b1455d16cd.tmp
                                                      • Size 871B
                                                      • SHA256 7944c053e4a7a70ddcf095781e7eab0da0fabec3effa661959b4deffe778d336
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.17280321831a9e79c-8534-4c9d-9c55-9c5e301a8dcd.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.17280321831a9e79c-8534-4c9d-9c55-9c5e301a8dcd.tmp
                                                      • Size 3KB
                                                      • SHA256 a1ab1c394104e562da231df4f54df65fc156140de84b85fc92d84cca0882b1d6
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.172803218402592d4-b459-41ae-ac80-d8771feb2c01.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.172803218402592d4-b459-41ae-ac80-d8771feb2c01.tmp
                                                      • Size 3KB
                                                      • SHA256 670e9c5906579f726ff3a1718dcdc1ef69b6a9f92666e33bec8e8e928bd7cfb4
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.17280321841646f9d-cb83-405d-9307-2a519d1d1e43.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.17280321841646f9d-cb83-405d-9307-2a519d1d1e43.tmp
                                                      • Size 3KB
                                                      • SHA256 5b0b777d656cb7d8d43c723a70cee6b65253822497b71be97e76b2531eacb9ae
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.1728032184d026677-e242-4cef-8985-e2de45c50afa.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.1728032184d026677-e242-4cef-8985-e2de45c50afa.tmp
                                                      • Size 1KB
                                                      • SHA256 6a84320112677ce9150dd89371f28ff149a52b0069a93c74239734098e33c1d8
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.1728032185b6314c3-681f-45ff-9154-6de7fca46168.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.1728032185b6314c3-681f-45ff-9154-6de7fca46168.tmp
                                                      • Size 780B
                                                      • SHA256 10cb6cd0fd27d122f41fbd3159b05027fbef859260f5fc352348f30279f49ba2
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.17280321866e84acc-c64b-4c9f-b72f-4f5b62f39539.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.17280321866e84acc-c64b-4c9f-b72f-4f5b62f39539.tmp
                                                      • Size 3KB
                                                      • SHA256 27345c2d427391c269d1f655ca5615e3ff5a2ae55b2c02ed7f657744260c1d7b
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.1728032186be479d5-9dff-492a-ac42-2a4ce9a20401.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.1728032186be479d5-9dff-492a-ac42-2a4ce9a20401.tmp
                                                      • Size 3KB
                                                      • SHA256 8df7f8a243ab993999a5a6227517683d974bf1f257c548bafaefdb922698ae3f
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.1728032187b7126a3-b55c-42ad-aa8a-c82f06ce3287.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.1728032187b7126a3-b55c-42ad-aa8a-c82f06ce3287.tmp
                                                      • Size 2KB
                                                      • SHA256 fd1872e6f0ff64fb545200d13b698c9a1c49b92191516198730758b1040d9a02
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.1728032188ea7da0a-bb91-4603-b1c2-98cb68f1b823.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.1728032188ea7da0a-bb91-4603-b1c2-98cb68f1b823.tmp
                                                      • Size 2KB
                                                      • SHA256 e6bb9c135c6a43e5040d6b3679d4ff7663e80515774d98699b1413e462185ecc
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.1728032189eb80bf9-57b0-464f-bbda-9be21bf88c09.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.1728032189eb80bf9-57b0-464f-bbda-9be21bf88c09.tmp
                                                      • Size 1KB
                                                      • SHA256 9cc5741d0bf576009344d0235da7cd1c033304fb4d8bea7177c94c00550ef7a6
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.172803218a9949bc1-06a5-419a-8b89-80f17dc33e11.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.172803218a9949bc1-06a5-419a-8b89-80f17dc33e11.tmp
                                                      • Size 1KB
                                                      • SHA256 a9d476ddf5869cc6536354a1802f1e948246ad37273b702268973a2662c8c867
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.172803218bb686084-6ad6-47fb-ba69-cfd9596294e0.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.172803218bb686084-6ad6-47fb-ba69-cfd9596294e0.tmp
                                                      • Size 963B
                                                      • SHA256 34c71d69480a818679416a9b94887f76ffb3e434599f8afaad9a24d1895ad70b
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.172803218bfd993b7-72af-4a78-9874-817afba1c831.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.172803218bfd993b7-72af-4a78-9874-817afba1c831.tmp
                                                      • Size 1KB
                                                      • SHA256 8d57a8920a1b807733bb458382bf470e7315645a31cde54460890efc53c0c58a
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.172803218c3bb8bc5-d7ee-4c4c-8d3a-afc7f1895d64.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.172803218c3bb8bc5-d7ee-4c4c-8d3a-afc7f1895d64.tmp
                                                      • Size 1KB
                                                      • SHA256 07525d5b0500e06b3fdabd49e27031db04a77b1539c9c0efd28d76a06db19479
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.172803218c51531ed-0ba6-4120-966f-c878d0ff25cb.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.172803218c51531ed-0ba6-4120-966f-c878d0ff25cb.tmp
                                                      • Size 1KB
                                                      • SHA256 c8197b8fb1195626f590429524618fd729b60af1ac4b304080fde143b54d9b05
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.172803218c6e40b44-925a-46ce-9341-f4aeba0bab6b.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.172803218c6e40b44-925a-46ce-9341-f4aeba0bab6b.tmp
                                                      • Size 3KB
                                                      • SHA256 53661ff84c39934838208972ba7fec4a1ea307504b8f8afeb730d38030aa8401
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.172803218ce50558e-51f0-4557-9f7b-04cca4030113.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.172803218ce50558e-51f0-4557-9f7b-04cca4030113.tmp
                                                      • Size 3KB
                                                      • SHA256 501b0c3a7ee3117749edf65c45dcbc298de8b6924d58ce5c099c3f8331c86fb5
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.172803218d2c9367b-0972-4405-b4eb-eac541c23b2d.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.172803218d2c9367b-0972-4405-b4eb-eac541c23b2d.tmp
                                                      • Size 1KB
                                                      • SHA256 d65a98766edcd1eda75bee2ff1e6bd1da09ae9682911276419b003305bd129e9
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.172803218de69aa1e-461e-4988-9d45-065bc625e261.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.172803218de69aa1e-461e-4988-9d45-065bc625e261.tmp
                                                      • Size 507B
                                                      • SHA256 0e14d9ca31bf2ccc1a3387c831cd58febb00c1ed6dc0ebacfca7291640e03a61
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.172803218ece3075f-4f5f-44a6-a624-41365e9f5321.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.172803218ece3075f-4f5f-44a6-a624-41365e9f5321.tmp
                                                      • Size 1KB
                                                      • SHA256 1527b761ae01b7a958e5d12549e3ea5c5e0dd497db025d17a7d0c49232ee2062
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.0.172803218fb2bdac2-9776-46f8-9c34-5de56f40f313.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.0.172803218fb2bdac2-9776-46f8-9c34-5de56f40f313.tmp
                                                      • Size 599B
                                                      • SHA256 0bfa50559b1164d184c7ef7b0d981a0af19bac909e43f2967af1f9902ecb838d
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.1.849264840
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.1.849264840
                                                      • Size 171B
                                                      • SHA256 d7435b4ca493124ee0f2e1d553ebbf2ee11791494d6796a5998b932e5090e64d
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ssdfp1456.1.8492648409472eb86-d4e2-4b32-b983-8c48bdfce4d4.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1456.1.8492648409472eb86-d4e2-4b32-b983-8c48bdfce4d4.tmp
                                                      • Size 255B
                                                      • SHA256 36db3c37f35126e4bee6bf31950293ca6597d9205bef58c8e1b25bf2e7326042
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      suggestions_cache.json2bf18754-6261-46c1-a9cb-a62f7c3ad2c9.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\suggestions_cache.json2bf18754-6261-46c1-a9cb-a62f7c3ad2c9.tmp
                                                      • Size 794KB
                                                      • SHA256 3a561a02f69571c3cb039d6206a0e6b5d641ea0e8941186837ae31e68f3ad01b
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      Local State000101a3-07d6-4082-bc6b-90c1bc627613.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State000101a3-07d6-4082-bc6b-90c1bc627613.tmp
                                                      • Size 4KB
                                                      • SHA256 89ac78ca852ca280f0f53e9bf39d567c36c927dd78a6c5fd6c19761e65c24db6
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      Local State04aef4fe-6e92-4993-91f7-eb617a584e68.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State04aef4fe-6e92-4993-91f7-eb617a584e68.tmp
                                                      • Size 4KB
                                                      • SHA256 66e0ebef75d1263a2419b24c008fc53767fee98bb89bd253544a73b887b64a37
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      VariationsSeedV25dbbc6cb-ab23-473d-b116-fd618182c8c8.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\VariationsSeedV25dbbc6cb-ab23-473d-b116-fd618182c8c8.tmp
                                                      • Size 19B
                                                      • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                      • MD5 SHA1 SHA512
                                                      Submit Download

                                                      VariationsSeedV2e9d5385f-f27d-440a-ae39-16f877b27f1b.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\VariationsSeedV2e9d5385f-f27d-440a-ae39-16f877b27f1b.tmp
                                                      • Size 11B
                                                      • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                      • MD5 SHA1 SHA512
                                                      Submit Download

                                                      clipboard_injection_guard_rules.json
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\clipboard_injection_guard_rules.json
                                                      • Size 6KB
                                                      • SHA256 b8d84b82da3d90323de6cf1b4e3594bf7acb99101c72379b10f4b982f82bd487
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      metadata.json0b61a2dd-137b-4445-8ee9-ecc508fc0d49.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json0b61a2dd-137b-4445-8ee9-ecc508fc0d49.tmp
                                                      • Size 124B
                                                      • SHA256 42dc5689279765d5204eae760cb625510863a8cec862a2375f042ad1b5819351
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      metadata.json8527fdec-fcd6-4064-8b44-1fcf06653717.tmp
                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\extensions_crx_cache\metadata.json8527fdec-fcd6-4064-8b44-1fcf06653717.tmp
                                                      • Size 13B
                                                      • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                      • MD5 SHA1 SHA512
                                                      Submit Download

                                                      hyph-as.hyb
                                                      • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1456_1502071394\hyph-as.hyb
                                                      • Size 703B
                                                      • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      hyph-hi.hyb
                                                      • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1456_1502071394\hyph-hi.hyb
                                                      • Size 687B
                                                      • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      hyph-nb.hyb
                                                      • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1456_1502071394\hyph-nb.hyb
                                                      • Size 141KB
                                                      • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      manifest.json
                                                      • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1456_1502071394\manifest.json
                                                      • Size 82B
                                                      • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      manifest.json
                                                      • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1456_1935295367\manifest.json
                                                      • Size 202B
                                                      • SHA256 8bd59f33a6e286c7e7352dfaebc9b03cea4e0e959a8ebb2f04b69bd92e107dc1
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      memory/4032-435-0x00007FFA1C370000-0x00007FFA1C371000-memory.dmp
                                                      Download

                                                      memory/4032-434-0x00007FFA1BB70000-0x00007FFA1BB71000-memory.dmp
                                                      Download