Analysis
- user interaction
yes - max time kernel
44s - max time network
63s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
10/11/2026, 12:30
Static task
static1
Behavioral task
behavioral1
Sample
OperaGXSetup.exe
Resource
win11-20260911-en
General
- Target OperaGXSetup.exe
- Size 4.0MB
- Sample261110-ppvxvsay3x
- SHA256 fac51bc65fd910451673a76dca3bd78245bb055f4db01fe5d978761ed480f083
- MD5 74ff1365049e2e94087881c9dfa52a7c
- SHA1 add56e7a764eb3284797d21add92c69bffe91f43
- SHA512 dffa7ceff169ec3301bd0ceb927cc62d27df937f103b0066acb3617a1f2d93c32cb4dd08456102394db8036f276d60084a8a0ca0524b63637bc89319426fbd40
- SSDEEP 98304:KAUanEy6OEYhL9L66c1gJgpKyncGswBsb7e1Vgw31Ay:rEyZLV68envDBAy
- TLSH T187163311B7C19875E1A325328E28FBA55ABEF0A10F52178777880F6D9F70282E935F17
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
- Executes dropped EXE 10 IoCs
pid Process 4048 installer.exe 1176 installer.exe 3580 installer.exe 2044 installer.exe 4856 installer.exe 228 Opera_GX_assistant_139.0.6053.42_Setup.exe_sfx.exe 2112 assistant_installer.exe 2096 assistant_installer.exe 1048 installer.exe 3828 installer.exe - Loads dropped DLL 4 IoCs
pid Process 2112 assistant_installer.exe 2112 assistant_installer.exe 2096 assistant_installer.exe 2096 assistant_installer.exe - Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Writes a Windows system DLL name to a user directory 2 TTPs 1 IoCs
A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.
description ioc Process File created C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\dbghelp.dll Opera_GX_assistant_139.0.6053.42_Setup.exe_sfx.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Enumerates connected drives 3 TTPs 6 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\F: installer.exe File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\D: installer.exe - Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain installer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname installer.exe - System Location Discovery: System Language Discovery 1 TTPs 4 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language OperaGXSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Opera_GX_assistant_139.0.6053.42_Setup.exe_sfx.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe - System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 1444 opera.exe - Enumerates system info in registry 2 TTPs 8 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS assistant_installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName assistant_installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe - Modifies registry class 45 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\.xhtml installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\Applications\opera.exe\shell\open\command installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\WOW6432Node installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\Opera GXStable\shell\open installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\Applications\opera.exe\shell installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\Applications\opera.exe\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\opera.exe\" \"%1\"" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\Opera GXStable\shell\open\ddeexec\Application\ installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\.opdownload\OpenWithProgIDs\Opera GXStable = "0" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\.html\OpenWithProgids\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\.xhtml\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\Applications\opera.exe\shell\open installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F}\LocalServer32\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\139.0.6053.42\\notification_helper.exe\"" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\Opera GXStable\URL Protocol installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\.shtml installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\.xht\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\Applications\opera.exe installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\WOW6432Node\CLSID installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F}\LocalServer32\ServerExecutable = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\139.0.6053.42\\notification_helper.exe" installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\Opera GXStable installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\Opera GXStable\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\opera.exe\" -noautoupdate -- \"%1\"" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\Opera GXStable\shell\open\ddeexec\ installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\.shtml\OpenWithProgIDs installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\.shtml\OpenWithProgIDs\Opera GXStable = "0" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\.xhtml\OpenWithProgIDs\Opera GXStable = "0" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\Opera GXStable\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\opera.exe,0" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\Opera GXStable\shell\open\ddeexec\Topic\ installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\.opdownload\OpenWithProgIDs installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\.xht\OpenWithProgIDs\Opera GXStable = "0" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\Opera GXStable\FriendlyTypeName = "Opera GX Web Document" installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\Opera GXStable\shell installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\Opera GXStable\shell\open\ddeexec installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\.gxanimations installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\Applications installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\Opera GXStable\DefaultIcon installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\Opera GXStable\shell\open\command installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\.opdownload installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\.pdf\OpenWithProgids\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\.xht installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F}\LocalServer32 installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F} installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\Opera GXStable\shell\open\ddeexec\Application installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\Opera GXStable\shell\open\ddeexec\Topic installer.exe Key created \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\.gxanimations\OpenWithProgIDs installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\.gxanimations\OpenWithProgIDs\Opera GXStable = "0" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\.htm\OpenWithProgids\Opera GXStable = "0" installer.exe - Modifies system certificate store 2 TTPs 5 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 0f00000001000000300000004ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e1996530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b060105050703080b00000001000000320000004400690067006900430065007200740020005400720075007300740065006400200052006f006f0074002000470034000000620000000100000020000000552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988140000000100000014000000ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f1d0000000100000010000000a86dc6a233eb339610f3ed414927c559030000000100000014000000ddfb16cd4931c973a2037d3fc83a4d7d775d05e42000000001000000940500003082059030820378a0030201020210059b1b579e8e2132e23907bda777755c300d06092a864886f70d01010c05003062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f74204734301e170d3133303830313132303030305a170d3338303131353132303030305a3062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f7420473430820222300d06092a864886f70d01010105000382020f003082020a0282020100bfe6907368debbe45d4a3c3022306933ecc2a7252ec9213df28ad859c2e129a73d58ab769acdae7b1b840dc4301ff31ba43816eb56c6976d1dabb279f2ca11d2e45fd6053c520f521fc69e15a57ebe9fa95716595572af689370c2b2ba75996a733294d11044102edf82f30784e6743b6d71e22d0c1bee20d5c9201d63292dceec5e4ec893f821619b34eb05c65eec5b1abcebc9cfcdac34405fb17a66ee77c848a86657579f54588e0c2bb74fa730d956eeca7b5de3adc94f5ee535e731cbda935edc8e8f80dab69198409079c378c7b6b1c4b56a183803108dd8d437a42e057d88f5823e109170ab55824132d7db04732a6e91017c214cd4bcae1b03755d7866d93a31449a3340bf08d75a49a4c2e6a9a067dda427bca14f39b5115817f7245c468f64f7c169887698763d595d4276878997697a48f0e0a2121b669a74cade4b1ee70e63aee6d4ef92923a9e3ddc00e4452589b69a44192b7ec094b4d2616deb33d9c5df4b0400cc7d1c95c38ff721b2b211b7bb7ff2d58c702c4160aab1631844951a76627ef680b0fbe864a633d18907e1bdb7e643a418b8a67701e10f940c211db2542925896ce50e52514774be26acb64175de7aac5f8d3fc9bcd34111125be51050eb31c5ca72162209df7c4c753f63ec215fc420516b6fb1ab868b4fc2d6455f9d20fca11ec5c08fa2b17e0a2699f5e4692f981d2df5d9a9b21de51b0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020186301d0603551d0e04160414ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f300d06092a864886f70d01010c05000382020100bb61d97da96cbe17c4911bc3a1a2008de364680f56cf77ae70f9fd9a4a99b9c9785c0c0c5fe4e61429560b36495d4463e0ad9c9618661b230d3d79e96d6bd654f8d23cc14340ae1d50f552fc903bbb9899696bc7c1a7a868a427dc9df927ae3085b9f6674d3a3e8f5939225344ebc85d03caed507a7d62210a80c87366d1a005605fe8a5b4a7afa8f76d359c7c5a8ad6a23899f3788bf44dd2200bde04ee8c9b4781720dc01432ef30592eaee071f256e46a976f92506d968d687a9ab236147a06f224b9091150d708b1b8897a8423614229e5a3cda22041d7d19c64d9ea26a18b14d74c19b25041713d3f4d7023860c4adc81d2cc3294840d0809971c4fc0ee6b207430d2e03934108521150108e85532de7149d92817504de6be4dd175acd0cafb41b843a5aad3c305444f2c369be2fae245b823536c066f67557f46b54c3f6e285a7926d2a4a86297d21ee2ed4a8bbc1bfd474a0ddf67667eb25b41d03be4f43bf40463e9efc2540051a08a2ac9ce78ccd5ea870418b3ceaf4988aff39299b6b3e6610fd28500e7501ae41b959d19a1b99cb19bb1001eefd00f4f426cc90abcee43fa3a71a5c84d26a535fd895dbc85621d32d2a02b54ed9a57c1dbfa10cf19b78b4a1b8f01b6279553e8b6896d5bbc68d423e88b51a256f9f0a680a0d61eb3bc0f0f537529aaea1377e4de8c8121ad07104711ad873d07d175bccff3667e installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 5c00000001000000040000000010000004000000010000001000000078f2fcaa601f2fb4ebc937ba532e7549030000000100000014000000ddfb16cd4931c973a2037d3fc83a4d7d775d05e41d0000000100000010000000a86dc6a233eb339610f3ed414927c559140000000100000014000000ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f620000000100000020000000552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac899880b00000001000000320000004400690067006900430065007200740020005400720075007300740065006400200052006f006f0074002000470034000000090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b06010505070308530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00f00000001000000300000004ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e1996190000000100000010000000ffac207997bb2cfe865570179ee037b92000000001000000940500003082059030820378a0030201020210059b1b579e8e2132e23907bda777755c300d06092a864886f70d01010c05003062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f74204734301e170d3133303830313132303030305a170d3338303131353132303030305a3062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f7420473430820222300d06092a864886f70d01010105000382020f003082020a0282020100bfe6907368debbe45d4a3c3022306933ecc2a7252ec9213df28ad859c2e129a73d58ab769acdae7b1b840dc4301ff31ba43816eb56c6976d1dabb279f2ca11d2e45fd6053c520f521fc69e15a57ebe9fa95716595572af689370c2b2ba75996a733294d11044102edf82f30784e6743b6d71e22d0c1bee20d5c9201d63292dceec5e4ec893f821619b34eb05c65eec5b1abcebc9cfcdac34405fb17a66ee77c848a86657579f54588e0c2bb74fa730d956eeca7b5de3adc94f5ee535e731cbda935edc8e8f80dab69198409079c378c7b6b1c4b56a183803108dd8d437a42e057d88f5823e109170ab55824132d7db04732a6e91017c214cd4bcae1b03755d7866d93a31449a3340bf08d75a49a4c2e6a9a067dda427bca14f39b5115817f7245c468f64f7c169887698763d595d4276878997697a48f0e0a2121b669a74cade4b1ee70e63aee6d4ef92923a9e3ddc00e4452589b69a44192b7ec094b4d2616deb33d9c5df4b0400cc7d1c95c38ff721b2b211b7bb7ff2d58c702c4160aab1631844951a76627ef680b0fbe864a633d18907e1bdb7e643a418b8a67701e10f940c211db2542925896ce50e52514774be26acb64175de7aac5f8d3fc9bcd34111125be51050eb31c5ca72162209df7c4c753f63ec215fc420516b6fb1ab868b4fc2d6455f9d20fca11ec5c08fa2b17e0a2699f5e4692f981d2df5d9a9b21de51b0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020186301d0603551d0e04160414ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f300d06092a864886f70d01010c05000382020100bb61d97da96cbe17c4911bc3a1a2008de364680f56cf77ae70f9fd9a4a99b9c9785c0c0c5fe4e61429560b36495d4463e0ad9c9618661b230d3d79e96d6bd654f8d23cc14340ae1d50f552fc903bbb9899696bc7c1a7a868a427dc9df927ae3085b9f6674d3a3e8f5939225344ebc85d03caed507a7d62210a80c87366d1a005605fe8a5b4a7afa8f76d359c7c5a8ad6a23899f3788bf44dd2200bde04ee8c9b4781720dc01432ef30592eaee071f256e46a976f92506d968d687a9ab236147a06f224b9091150d708b1b8897a8423614229e5a3cda22041d7d19c64d9ea26a18b14d74c19b25041713d3f4d7023860c4adc81d2cc3294840d0809971c4fc0ee6b207430d2e03934108521150108e85532de7149d92817504de6be4dd175acd0cafb41b843a5aad3c305444f2c369be2fae245b823536c066f67557f46b54c3f6e285a7926d2a4a86297d21ee2ed4a8bbc1bfd474a0ddf67667eb25b41d03be4f43bf40463e9efc2540051a08a2ac9ce78ccd5ea870418b3ceaf4988aff39299b6b3e6610fd28500e7501ae41b959d19a1b99cb19bb1001eefd00f4f426cc90abcee43fa3a71a5c84d26a535fd895dbc85621d32d2a02b54ed9a57c1dbfa10cf19b78b4a1b8f01b6279553e8b6896d5bbc68d423e88b51a256f9f0a680a0d61eb3bc0f0f537529aaea1377e4de8c8121ad07104711ad873d07d175bccff3667e installer.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4048 installer.exe - Suspicious use of WriteProcessMemory 10 IoCs
description pid Process procid_target PID 4128 wrote to memory of 4048 4128 OperaGXSetup.exe 80 PID 4048 wrote to memory of 1176 4048 installer.exe 81 PID 4048 wrote to memory of 3580 4048 installer.exe 82 PID 4048 wrote to memory of 2044 4048 installer.exe 83 PID 2044 wrote to memory of 4856 2044 installer.exe 84 PID 4048 wrote to memory of 228 4048 installer.exe 85 PID 4048 wrote to memory of 2112 4048 installer.exe 86 PID 2112 wrote to memory of 2096 2112 assistant_installer.exe 87 PID 2044 wrote to memory of 1048 2044 installer.exe 88 PID 1048 wrote to memory of 3828 1048 installer.exe 89
Processes
-
C:\Users\Admin\AppData\Local\Temp\OperaGXSetup.exe"C:\Users\Admin\AppData\Local\Temp\OperaGXSetup.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4128 -
C:\Users\Admin\AppData\Local\Temp\7zS020925C8\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS020925C8\installer.exe --server-tracking-blob=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2⤵
- Executes dropped EXE
- Enumerates connected drives
- Reads the TCP/IP host and domain name from the registry
- Enumerates system info in registry
- Modifies system certificate store
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4048 -
C:\Users\Admin\AppData\Local\Temp\7zS020925C8\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS020925C8\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x290,0x294,0x298,0x270,0x29c,0x7ff7d1c75258,0x7ff7d1c75268,0x7ff7d1c752783⤵
- Executes dropped EXE
PID:1176
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\installer.exe" --version3⤵
- Executes dropped EXE
PID:3580
-
-
C:\Users\Admin\AppData\Local\Temp\7zS020925C8\installer.exe"C:\Users\Admin\AppData\Local\Temp\7zS020925C8\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=4048 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_20261110123208" --session-guid=42a161f8-0839-4d3b-8ae6-ece3caed95a0 --server-tracking-blob=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 --desktopshortcut=1 --wait-for-package --initial-proc-handle=58090000000000003⤵
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:2044 -
C:\Users\Admin\AppData\Local\Temp\7zS020925C8\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS020925C8\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x280,0x284,0x288,0x25c,0x28c,0x7ff7d1c75258,0x7ff7d1c75268,0x7ff7d1c752784⤵
- Executes dropped EXE
PID:4856
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\installer.exe" --backend --initial-pid=4048 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081" --session-guid=42a161f8-0839-4d3b-8ae6-ece3caed95a0 --server-tracking-blob=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 --desktopshortcut=1 --install-subfolder=139.0.6053.424⤵
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:1048 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff72f2f5258,0x7ff72f2f5268,0x7ff72f2f52785⤵
- Executes dropped EXE
PID:3828
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=05⤵PID:1160
-
C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x1237598,0x12375a4,0x12375b06⤵PID:2148
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=06⤵PID:2776
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0xba7598,0xba75a4,0xba75b07⤵PID:5028
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --installer-run7⤵PID:2804
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream8⤵PID:4632
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x12c,0x130,0x134,0x128,0x138,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a09⤵PID:2272
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream8⤵PID:4884
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x130,0x134,0x138,0x12c,0x13c,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a09⤵PID:2712
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x290,0x294,0x298,0x26c,0x234,0xff5f68,0xff5f74,0xff5f808⤵PID:4132
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream9⤵PID:2956
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x12c,0x130,0x134,0x128,0x138,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a010⤵PID:2400
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream9⤵PID:588
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x12c,0x130,0x134,0x128,0x138,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a010⤵PID:3428
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream9⤵PID:4932
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x12c,0x130,0x134,0x128,0x138,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a010⤵PID:2076
-
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized5⤵PID:3708
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x12c,0x130,0x134,0x128,0x138,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a06⤵PID:1108
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --gpu-recent-crash-count=0 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1644,i,16957352306508495066,14954455450040335481,262144 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1836 /prefetch:26⤵PID:3412
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1940,i,4704633523594166019,148732418070909616,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2092 /prefetch:116⤵
- System Time Discovery
PID:1444
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1956,i,873657467571073652,3030856191560207966,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2924 /prefetch:136⤵PID:2932
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3272,i,15873577247912896251,18065884415790337583,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3400 /prefetch:146⤵PID:4284
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3360,i,13992399020196234883,4652966090562241172,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3480 /prefetch:146⤵PID:1560
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3372,i,10387220395523264075,12731263247170634024,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3500 /prefetch:146⤵PID:228
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3324,i,9803057642392421546,14800894749484568297,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3420 /prefetch:146⤵PID:664
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3348,i,3497561642401788112,13114407898782267036,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3460 /prefetch:146⤵PID:488
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3336,i,9520314572765932346,2114835074471277833,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3440 /prefetch:146⤵PID:5008
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3384,i,4015899126975664198,14357961858386648191,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3520 /prefetch:146⤵PID:4732
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4212,i,7002532917802085914,6095677149344468315,1572864 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4252 /prefetch:16⤵PID:2332
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_gx_splash.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB1476⤵PID:5248
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4748,i,13159888980155677877,8310183189276799221,1572864 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4760 /prefetch:16⤵PID:5744
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5080,i,10801873111264231702,16317830736719226694,1572864 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5124 /prefetch:96⤵PID:5816
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5248,i,9395948747125860838,1428018388130872349,1572864 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5256 /prefetch:16⤵PID:5848
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5388,i,3629802503593090346,890452413285464153,1572864 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5408 /prefetch:16⤵PID:5860
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5516,i,11207895070696697419,3082597422441111331,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5528 /prefetch:146⤵PID:5876
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5524,i,5583750142030892283,6025004340801154838,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5532 /prefetch:146⤵PID:5884
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5536,i,4568543851487927955,15823296244574068778,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5548 /prefetch:146⤵PID:5892
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5540,i,2596604297083178100,5245353402365238380,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=5560 /prefetch:146⤵PID:5904
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6348,i,14664969768481172242,11914245293416654967,1572864 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5668 /prefetch:96⤵PID:6040
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6820,i,7220082860320870,7323165583785410136,1572864 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6848 /prefetch:96⤵PID:5408
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5392,i,14092734557781887586,4172138286615196455,1572864 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=6088 /prefetch:16⤵PID:6800
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7144,i,14784241555750182162,218683428865955276,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6688 /prefetch:126⤵PID:3940
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B546⤵PID:6504
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x284,0x288,0x28c,0x260,0x290,0x7ff67dd2cde8,0x7ff67dd2cdf8,0x7ff67dd2ce087⤵PID:5980
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7800,i,16384561852016183170,9515526994488581786,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7820 /prefetch:146⤵PID:6556
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7808,i,3198954367826139880,5472745137981502292,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7772 /prefetch:146⤵PID:6828
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7928,i,4436587251375660077,17291358451146354380,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=8076 /prefetch:146⤵PID:6564
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8204,i,594669325497748337,2268477162834646079,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8216 /prefetch:146⤵PID:6608
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8232,i,5523282512380409971,9025220883028107795,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8244 /prefetch:146⤵PID:6628
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8492,i,2805983108724820709,9324832450492396839,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8500 /prefetch:146⤵PID:6636
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8508,i,2356173312943155738,784849541647817564,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8648 /prefetch:146⤵PID:6060
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8780,i,3213979676312255955,11476713362025456659,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8792 /prefetch:146⤵PID:5612
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=8928,i,7862265541477743640,4780240649270140316,1572864 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8940 /prefetch:96⤵PID:7000
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9092,i,18256425794186922404,305813315672605429,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=9108 /prefetch:146⤵PID:7016
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9100,i,17263036744801392003,1745056210288436183,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9128 /prefetch:146⤵PID:7028
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9144,i,15784476827044222196,8523187936470660253,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9136 /prefetch:146⤵PID:7036
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9280,i,11847412702252406824,8282971694699092146,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9300 /prefetch:146⤵PID:7060
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9272,i,3157254802950219926,16974014706853249547,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9440 /prefetch:146⤵PID:5160
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9796,i,6320392818133678736,13209445961279475104,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9792 /prefetch:146⤵PID:2312
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=10144,i,7348066547991601442,2079071583058412113,1572864 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10180 /prefetch:16⤵PID:6996
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10324,i,17087368837712267921,2821357787395580927,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10332 /prefetch:146⤵PID:6812
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10388,i,6120917568090879938,12515054998785656494,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10400 /prefetch:146⤵PID:4444
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10556,i,9495451277386174720,5176716140954504368,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10568 /prefetch:146⤵PID:3880
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\Opera_GX_assistant_139.0.6053.42_Setup.exe_sfx.exe"C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\Opera_GX_assistant_139.0.6053.42_Setup.exe_sfx.exe"3⤵
- Executes dropped EXE
- Writes a Windows system DLL name to a user directory
- System Location Discovery: System Language Discovery
PID:228
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\assistant_installer.exe" --version3⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:2112 -
C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x1237598,0x12375a4,0x12375b04⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2096
-
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --autostart1⤵PID:2488
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream2⤵PID:5144
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x128,0x12c,0x134,0x130,0x138,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a03⤵PID:5256
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream2⤵PID:5496
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x12c,0x130,0x134,0x128,0x138,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a03⤵PID:5520
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x27c,0x280,0x284,0x258,0x288,0xff5f68,0xff5f74,0xff5f802⤵PID:5588
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream3⤵PID:5608
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x12c,0x130,0x134,0x128,0x138,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a04⤵PID:5628
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream3⤵PID:5708
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x12c,0x130,0x134,0x128,0x138,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a04⤵PID:5736
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream3⤵PID:6876
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x12c,0x130,0x134,0x128,0x138,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a04⤵PID:6936
-
-
-
-
C:\Windows\system32\wbem\unsecapp.exeC:\Windows\system32\wbem\unsecapp.exe -Embedding1⤵PID:5688
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart1⤵PID:7112
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x12c,0x130,0x134,0x128,0x138,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a02⤵PID:3112
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F1⤵PID:6864
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x280,0x284,0x288,0x218,0x28c,0x7ff67dd2cde8,0x7ff67dd2cdf8,0x7ff67dd2ce082⤵PID:6188
-
Network
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
1Component Object Model Hijacking
1Hijack Execution Flow
1DLL Search Order Hijacking
1Privilege Escalation
Event Triggered Execution
1Component Object Model Hijacking
1Hijack Execution Flow
1DLL Search Order Hijacking
1Defense Evasion
Hijack Execution Flow
1DLL Search Order Hijacking
1Masquerading
1Match Legitimate Name or Location
1Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\Cache\No_Vary_Search\snapshot-new.baf
- Size 20B
- SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
- MD5 7177cd1b3e21f48a23cb47dc11b36f7b
- SHA1 9e1086a6c2296b41c004834f7521790bb2941d67
- SHA512 e7e8b2204e455f6e7fa5a2239cbb4c0c506562d30184fb07d63f8544cd0249226bd3d7d399ef0b69774e72afe100f9858da527b0e15a7bd3c35782d7513eff23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\System Cache\Cache_Data\f_000001
- Size 216KB
- SHA256 a030b34e41b7f4b91ee36f472f12095c52299edbbdbc4dfc0b3ae21d7c56f248
- MD5 23fe41cbd297d46db70f52a422d47cc8
- SHA1 63eddad99f3e3624b084ed1492332c2a18c91e4a
- SHA512 de88998461eba857d35d3591bcfc1804ebd7185df4bf8d6dec3c28a39e58248b7aee771d5e5a2b1386372f771575e0840e7328e5758ed574001f6d594c78c3a0
- SSDEEP 6144:aA1dT/pWH30mnCw/HZH0qy7KE70lqTNvk:7dTxe3znZfZH0nKE70h
- TLSH T1AF24233AA3227F0E77F89A2A7744EA105D15C578539ECEDB9BE75BF051008837D42A83
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\139.0.6053.42.manifest
- Size 225B
- SHA256 72d360ad77949cb4bb29d37d2552b9be796d3de8873dcc24874ac9e8cefe83ce
- MD5 e0904ea6c026f476ff4bbcc97b5315a3
- SHA1 4a6a1cdd2fa4a4effa3fbe20a5c675462d000667
- SHA512 96e7a14c3adfb1ddf4c7dbd86e7f88f0ece7e890240d43afa3e7ff29b293251eb546fbc5901153890ffe971ccd8e59a7177939bf04e31b3dbbbcc193368dedc4
- TLSH T1DAD0A921848522096F214920BCAE2021419CC72744C8608870FC7867BFB3A28A4928F2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\150x150Logo.scale-100.png
- Size 2KB
- SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
- MD5 b5a21b88b3d8a42df265817ebeb742bb
- SHA1 e0be32b4fc158db4e9783094cce614922114b742
- SHA512 21ece0dcf17b038400d09565438fce8be61746daa0250f2fa9d0526bba3d1ce6f8da5cce944ef8fa685c5eb6cf857b073d2a50ada44a44a76d84813871faa5d0
- TLSH T133415CCC56657CC8CCE065760A67A72C5FD3AFAF0A335B7A6010089ED99F1453803ACC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\150x150Logo.scale-100_contrast-white.png
- Size 1KB
- SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
- MD5 0bae0648c3e320c4d439f158b4fd5531
- SHA1 4e860ae24f03522c89bdf37f3ccc10b54832861e
- SHA512 6a5e4105ccbe1664546798db057b93622c9cbd6d5af4967e6be4e390a18fec0ffcc807e3331f09ed0de63ed85569be7ec5eed5a7c663df6ce4a5b70e09500371
- TLSH T11A31293504B0A195E74A36CEADE49C2B449C6AEE183E0139D60E246FC430A5DC8E530D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\150x150Logo.scale-140.png
- Size 3KB
- SHA256 a36a13a5d5e3d39e3018ccc5f8859944c87256f8be24a3c08a6bf3cb06a26804
- MD5 7e529063a02e4e83736b0263cb1b82e0
- SHA1 17a3c4b76962e90b1d2fa8a49441157949f4dc78
- SHA512 571806725f83feca90360b246d167a8857edfd9edc8dc0ef7eeef80f291fd06088c405a5653513cb8aa309df08cd609df85a95e3379e3e5907566c876ca77cde
- TLSH T1A2515C3226B5A3D7E796C374A780921B3899896022A20D0092D9BB27F05C253F6BE361
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\150x150Logo.scale-140_contrast-white.png
- Size 2KB
- SHA256 0bd63fe653885286e180fbdf6d1dadc66af242b8ed6bd1d03d8c5eccc20e91d7
- MD5 ebe7d27ed3b4cb6566a10165abfaa941
- SHA1 fdf7c27058cf5daf7061756e938a33c1bbb26c3d
- SHA512 50ec8592d78f00a6387f06e077e0def88db26723c0fb8632c4ea06f2e09488db0fb82e0eb1f03da53f9c750f6cebd29f7889b1de342e4f0ae69f88c4b7b1425b
- TLSH T1B05106F6989A64D8BEA38C5BF7F583D001643DEACA6906D43BC45820EABA58A441038C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\150x150Logo.scale-180.png
- Size 3KB
- SHA256 6a8f64754c75edcc9abc1138e44acbd7064d7e8e2a28783939241dbd6afa30a5
- MD5 f332e088e89b88070ef1efbeca5b90f8
- SHA1 86129a8b1e2e7f78d6ce23c58a37fac9da5e566d
- SHA512 2314aae692c024f914661e46cfd76531da6c09b94c084fe915a0594625927df30282d09518a950eafcfdd2e499b1e4877cf3cdbf5509de0cc756dadcde43fd45
- TLSH T17D815E49F7942B0AF64AD07A0703F172487B4060179A730EDDE72988795F4CBA36B787
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\150x150Logo.scale-180_contrast-white.png
- Size 3KB
- SHA256 a706b332e6a846357a86c30d0e8bb7697e7dd55c2ae592dd45611ddce0c0bf14
- MD5 98b9f7a4f4322e7b46de392fd20f66e5
- SHA1 d009d227522206c40cf592e460c9642cd03b8769
- SHA512 3b3e5baf3cfc57119e0812de2816df6c7dcb42e96c4891e47c4f32320fd3be2f27a0118051a6651595baaaa30069bb1c0d78aa701744a44534cabe7547d4becd
- TLSH T101716D453798377AD6D7C2191DCD00D3C89C23DD355E6A3CBE47D0B065B21576E7441A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\150x150Logo.scale-80.png
- Size 1KB
- SHA256 7e6b0d9ea7fda1b5ca7a0b01290521dff943da4cbf1498412ca7d749db42c32d
- MD5 1f2fb1bf463b2ff2bec96784debfef84
- SHA1 ae6f721ad937fe39f86602f71002435b18bf1edd
- SHA512 0c92c4f75e620d0b636cfd83e89c69a44f6a96a00006fbd0b13637ba5dcc77c9b302029e62f4b80766811f31810f9c20ac1a98b65c38789951ca0e19a5bb6894
- TLSH T15D31D896AC81A05BD3777972212589F78EF32C0605511E78F0F16130A9678637AF2620
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\150x150Logo.scale-80_contrast-white.png
- Size 1KB
- SHA256 dfd1054f989cdee25f19ea792f363f042a125cab537a424f0224bbee13607e39
- MD5 17471bb63ed62a6e545b6b626a763511
- SHA1 586b9efde7b3a04580a49f8fe7739593d42d303e
- SHA512 f619d963b62edb07c8077c3c6ae60ed8d3f3dd5bb1d05a2b83dca1a7a4a346598b055f6c7ea22e05bf281b1de0f205f5d1054819000759d9450ee1fe8f6491ae
- TLSH T17121B6CB7941E7567E21CCB920692044DAB57A480E7CC2EA7521A8B6871335CB7B4DB8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\70x70Logo.scale-100.png
- Size 1KB
- SHA256 a333d7e4293f5269426b3fcb673a284f3708a66f957de62403b6570b24bae8f5
- MD5 c3722e0232ec20ac8f99cce7a040b294
- SHA1 91ca47da87ec045ed3ef5d97243167f08fb9e10b
- SHA512 71940b8431e36307ba5176939a169b9259bb6b43c32529a10a12c5ea31447bddccad7eb9ef7cb309b175ee7bd56e70926bd5aa0855d0fd9497547ecd7ff93158
- TLSH T14F310A5E007CA6A894029FBFDA441F98F3C25C883C58DB48850C9A9DD66B8F6F0C4E5A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\70x70Logo.scale-100_contrast-white.png
- Size 1KB
- SHA256 ebbe0b4761ea8968a0a3fafb383ac7ae175e98cd31a0f41bdf5fcb43469b58ec
- MD5 504d80d276adcc0163a8e4720013f9e7
- SHA1 6d34a0593ffce916cd19b66d61004fd7e7eb2cd1
- SHA512 9961259704ff97c0e1899a33259f62155b73264e272064f3fa90e64124513c7c8bd6ab69a39c1efb271ecc2972ab8fd86fb836f22153a9bb35419c3816d11337
- TLSH T19721083B1E4BE6093DF97C61EC0D52F6A836723E4C527A4519176D26A224A6060633C2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\70x70Logo.scale-140.png
- Size 1KB
- SHA256 207519f1c7b6c7509bfeb7b55724997eec6456c8baf55e882e72fc5cd43da221
- MD5 667bfbaaeb2d2b372b6e0d4bf4992ce4
- SHA1 4c6c2e07183963f59391945fbee077b55f8f6b2a
- SHA512 ac63a3dd2f6088e7849e3824c35fd58ca78ec77dc31e1f6cbd47de7cc394318cba7d2309912206a94180267be057c2af5c835424019e2a03ee33a2ab801ba9a4
- TLSH T132410C6EC9F04A5BE0CF56A79A523DB6B0F783D514047D355041502353B0E830EB717B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\70x70Logo.scale-140_contrast-white.png
- Size 1KB
- SHA256 464afaf960c32abdc2c3937a48bf14c5d1a819b017e719fded591d43a65d94c4
- MD5 93223e8777b581e988b703df82593b17
- SHA1 40a035464c27041ccc87c7935c45100d93d1c948
- SHA512 b8a3ee4a71e609625eab51f0f6dafcc82cc47ba2c567cc8bf73cf6423056f9171276289bfdcc8428b7c07645097664065ee9b0b78874425bff800178222fed12
- TLSH T1CF31B8E33C06263ED722BB2F74208CD5C53B7A61619CFBEE259A5462946B3C9044EA10
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\70x70Logo.scale-180.png
- Size 2KB
- SHA256 d6367dbc074e37f3488c26b0bad229bfe99f5c6bb0e28d37b41906c436152b57
- MD5 704d0a2693b350e7c463b0ff2143835b
- SHA1 0313ad4c3690a590ac54552d2c27806e73776600
- SHA512 4517b2fa911149885ec5549f3173d3c774716740826873e4b2199c804b17e776a5296565930e5acdb8d5476710a391b21e6da8941df64c525a487db4619a1ea7
- TLSH T1C3515CE98D504D4ACE42F079880A4FBA6026C61246268A1FF7ED51F363E67A3481F685
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\70x70Logo.scale-180_contrast-white.png
- Size 2KB
- SHA256 5d46e4056f3915c279f1fa9edf61d93529fbcae5c59d616380ec5d9405b7763d
- MD5 39e2fcf13c20103c5f449c06d3a4cf75
- SHA1 ae8e1bce2be17ed450d891864e6aa22642af39ac
- SHA512 8e4902262b064008804d49d1b5f27bb7b8f33ecefb05181aa69534e1d21662719dd4f8e0677c58215f6c5ca9eb4fb92fca54a89f9720230afbf06a70216abf26
- TLSH T12D416E5701B03CBC6DD9913B53750697D4F3D68FF2544C0B6688345DE4F00D009256EB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\70x70Logo.scale-80.png
- Size 1KB
- SHA256 dc20e5aa2b500cd5b5c9f89647d3487810685c94268f22678e27820e2454bb3e
- MD5 32d3e390613cddbd639e70ddb2511ac0
- SHA1 c96ac088e72d756f31896b16776ef100379f802c
- SHA512 7381ceb8fee84f398082177f30dc01593beefa729c73b0166af686bcd25d54312b202d9243834b754769de41e9a1deed74ca91a76dcda918a749cdb4f08c124b
- TLSH T14311F94011E157001133EC75C8192D61F10BA2934745E4A431FACCEA7085B8AB0DF5CB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\70x70Logo.scale-80_contrast-white.png
- Size 901B
- SHA256 dd6f46d32c3e235508f9e4c7d7f993bd807d955bca7e63cf3d57c6c4c102f46d
- MD5 e6add5afc73f7b06fc2348550595f8d6
- SHA1 4d658bddb93fa6cb423ebc61bd20db37e4d37db6
- SHA512 55437dfea7f68a4572dfc86b5428cbe9db86c0d32d0b09ba6b7b1cf8e49e5f1bb94285bbdc97d8ee00d70ba75921db59644787c1be1672fe37cee09441f249b6
- TLSH T1D811B76D6AA4C735BBF50D30A075410F4675218F351104333D6EB66133A09CA54DD04C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\CChromaEditorLibrary64.dll
- Size 145KB
- SHA256 cd84acda3de582df0c11fbf5cbba879fbdcf974041d140e760e8ac0828c3b954
- MD5 f400ae899b821d77f6dbb2d892e42057
- SHA1 e3a1c5e04ae14a4328db3273fce7a176ce10f580
- SHA512 5318c5536ef7aaa9832828d13e18d551ab3921ba519369b20638e000323d1803e3437f1f13b530c0c35c9f92ac52156d9b158914d2fcd7a755a376a980999de0
- SSDEEP 3072:kvhCtUxogw1kAmNvN6FaZmT3ztaeMLG/UFGB3Zl6ucJmerHqG25Dpq8cJO:kvhDzw1kAmNv0GmT3ztaeMLGCGB3Zl68
- TLSH T1D7E386B532052815EE761AF8857D3D90E669FF111F60E2DF5228A01CAEB0EDA2C31F95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\CUESDK.x64_2017.dll
- Size 474KB
- SHA256 0778470cd9fee3966b3064624d30169848e64937009eabf573ac1ecf56076c8e
- MD5 986df4b2caf739861de1cfb039e17ec6
- SHA1 5cca1993a18d5f946505fc5cc3933254a6816629
- SHA512 03db4727a2481ada1b296b8b6ef6ef8ddd339f342d51f7e842780c5f37be2d2a80a58fcca16b1d0af98b76c40dfdcebf734a851dc356a84dd511b6a92629e3aa
- SSDEEP 6144:SlTZkQQzVVTgmAffw5QTzL6+75I+qZojZdB:SzkQQzVVTgmAffMQTjO+x9
- TLSH T1C9A4392FBB484DD8E137917C89EB8F03E1B664590B1187CB15C693AD1E63EDD1DBA220
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\assistant_package
- Size 4.0MB
- SHA256 e01abdd95ed59e805006f1b46eb476063c619f5aa47f35973611de7cea65c86b
- MD5 32428d06dc74a4e0eb05fc0c1b252082
- SHA1 fd50cea407bb1f140c450b000a90884b4ff38f0a
- SHA512 bdc57e87ff93e5498ada50f40778607edbb0bda106f250045d7067db091e70c0f0461c441d28c0144f91c33f24cb02d758b3ba04ac45d84a0c0e54edc9454398
- SSDEEP 98304:6kionSBWZ01sVZqoSHJHoJBw7EmdbuEWvSKaRcJ00XsbI:6KZysVHJBwbuEKzai6sN
- TLSH T1F41633237A858475D13315330CD8A5BD23BFF2B296F69DA7A3950F1E8FE0686C50C25A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\d3dcompiler_47.dll
- Size 4.5MB
- SHA256 c62aa16c1819af172009d76c9e586df8aa5dc9dc04df29107139d3ebb3a78eb1
- MD5 bf2995cc32197e033cd2f26847ef06aa
- SHA1 eaee77f698a7b1985b3cd61a26a880031a2d7029
- SHA512 7a81762a7a9702e5cec8939439f63f4a6e51bbec139282530b92a75cd81d0910d372baa91c1e02b7de09c27c4b1561071c128c2e7a31061243bc248a1729f7b6
- SSDEEP 49152:JMaW1H1ZcPsk9HOJLjJP73tSjPM2gjg9aIhR46LUbOWHHJdsCIdkTYoHjnTVyNMh:KcPsguxj34bwmvD3emt3Dnkf
- TLSH T1DC269E56B7E850E9C1BBD138C687861BE7B1B80513305BDF02908769AF73BD16A3E724
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\dxcompiler.dll
- Size 24.7MB
- SHA256 ac3bbfa0c7e598090127d7a00e6d69fe1b1fdf92aae52caed5f26b98c2f36b92
- MD5 2c9e9da614dfcbb950d935820f4433e5
- SHA1 e74ebe0bf2e344ad3a920205ae5dc636591d33f7
- SHA512 eddda56adc6e73ed8c139e489c64fba55d2b32bd3ac3c85aa7d95531416839b0c97d1f3e445e5adff3068010573722d84a28bab9a166a28ce84f7036a4278807
- SSDEEP 393216:LbbdIp0DrexlCbbfjPs776G/VzQRT+0oKjT4:8lAU776A1QRo+T4
- TLSH T1FD4729122686D49CC099C879C3678B268A6C30E73FA7B9DFC0F451252B79DBC5B39235
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\files_list
- Size 4KB
- SHA256 17f800bbc75883adc4055c35af37fd428db248cd1e507e5ff551cc4bba5e1265
- MD5 6d1df4f4a31edf768c1a46e0c0f7a4c9
- SHA1 ed7c224cca4fee2676e2ab18a3fac94f102e6378
- SHA512 7ca4ad49ebf41026336318b1fe1bd8e7048249b7ec0e1cda134ded18f1c75cbbfaf7e0b2ccd6c278b136f4ab0d28d694d04d86a466299d1ebf8ea6b123d7c3b4
- SSDEEP 48:yQlvE3eCPTuqaeDCOqIG4AUsKyIYKJhqTwb0a9RVtbby3HCk7RPO2UrgB6D:yQyTfz5XZyITJhGwbx7Vtq3ik7w8U
- TLSH T164912697C41F41698826B7F23D20F495A935A8E6E97CA09CE797181058F73FC02C6FE8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\headless_command_resources.pak
- Size 3KB
- SHA256 0ee35aeeb7c9a7beb89664639100c70320f1164f0266b1d1ae91b8e6a3237398
- MD5 cca4f404f506ebdab79a721236b11d8e
- SHA1 5992f37ef5acf1fa6cab6349ef8b17affeb95a5d
- SHA512 bf2d9900d0b3b6b0dfbd5013f2252f3831cbc67ee4ae61d0fe135cf5e272fa3d296d222c1b62f05f1ec41ed575e388fead33efadd8f3187a1367eda86d05b6e0
- TLSH T14E5129D4A7E49068CD1A47E033595C74500B49C0D297EAFF98EB64E5482AA8370D5F37
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\icudtl.dat
- Size 10.4MB
- SHA256 113f7464a507af4f7d2b0ea73094217881386f19dac7cacc5f071e7a4cf04a20
- MD5 5a30a6d50d17f7b5f5e5a8f1ba212852
- SHA1 f8ac4d67d7af27c1babd77f368676e3cc4fc8827
- SHA512 d270ff306f060fe8512d2f96d475e374d832d2f5765514c05b3cde526346f8387b657daeec61c2402103318edd9564758abb89d92c8a612883ca4077afe8ad7b
- SSDEEP 98304:n0cBQYOo+ddly1/rQqQC1HiXUxO/RJk3IWhlYntjndV+j89F:n0cBhORok2HiXUxO/RJk3IWhlYntjdBF
- TLSH T114B62803A2FB4EC2F9FB9FB098F552779567BD49AE32805951042F3B1C333908665B62
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\installer.exe
- Size 9.4MB
- SHA256 212144535e50b2240895f727887316d410ba55e448a87d90fc73f5e09aea2b8d
- MD5 eded6d44b45da6ea24b97aaecd1c27f5
- SHA1 c0e3d82c55aca8b613f84af96d43a8365e8ebc72
- SHA512 809732870d3f735e70850adb121b56565f6be91679f5945d4fb00ddf76290e7870081eb2e2d7eb8d5b0c5e1923f193d58f1ed99983a830ef5139b5b67826d887
- SSDEEP 98304:nSSsfoU8vmUqJqTL8pMvEsQyQP/Wh6zAbK8YFBI3++wteEm0:VSoUQ7qIP8YbR3+Bq0
- TLSH T1EAA68D53F3A611E8D06ECA748B7A523299757C464B30A3DF0AE43A251EB5FD45B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\installer_helper_64.exe
- Size 617KB
- SHA256 d310b1302bfd92060b5a706da5f677a626770435db62ee7c49bf4983ed20a547
- MD5 f9a5ff81e62892f2782f08e60ca6b906
- SHA1 2622a55bf44a065ed4282207fbb9df6ea3e054f0
- SHA512 462837d2f4aaeb4c13c6890622b2c9c04580df1403e8da32df502e3094a304cdcee5266037f963a2f1ae025394827bc29a4dbb8ad962ff540cca269bd320a3b1
- SSDEEP 12288:xwVJD18Xpd5KY2SGIptbi+4OxzMCwyX4wuAbg:iVda35KY2twZ3wmpuAbg
- TLSH T1E6D49F56B2D557E8D03AC0348652C612FEB17C560F61BAEF03A0726A1F77AE41F7A321
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\libEGL.dll
- Size 455KB
- SHA256 4dc3741a85ba909bd1ea9885a17c2dff4a663786a4337555144b469a1f842713
- MD5 657271a7feecedb9cecb96ae0a16c8a5
- SHA1 589cc3944fdce39129219b5f2e5e2ac96a7412be
- SHA512 dc74b8e254f86d2ab3c7e7f82a83f02dae76c2e48451edb41f3b57cb7965670dd8bcc57d12c3b0b9e6818bfe67146c6cc66d5bb9e1470bf21c7904e89c7e632f
- SSDEEP 6144:a0VaBgOYbNQV/Lq9tmhwADvi55EUn0255Zc7B7ynd/WStUz97iGDWet:nVSmyVW9tmhwAD66Un02DZc5M9sv
- TLSH T1B1A47D14B7D558B8E077C0788A538543EB7178960F61EAEF03A0E2792F777E45A7A320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\libGLESv2.dll
- Size 455KB
- SHA256 dd169872125412554385b8b20ad2c779971bcb35cfb28e1c48553c6fe9f351d3
- MD5 7104378ea01d21265f1a77b744667855
- SHA1 f2d8a6153721c9f4270a2ed5e7fdde3df697dd21
- SHA512 e24247930321cea225788b451cbcb48583a2e16cd2ed146b12ef5336dc5b20085bfeb87ec7c3c27e14b771af03cb12f8da83dc03aef1236152027fe73c4450b1
- SSDEEP 6144:z0fihYWYstAV/Lq9l2hAY7/dp0UUn0uRCZvx78SiWSHnz97Vles:gfK5SVW9l2hAY7rvUn0ugZvF8rZl
- TLSH T156A47D14B7D558E8E037C0388A538547EB7178960F61EAEF03A0E2792F777E45A7A320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\bg.pak
- Size 1012KB
- SHA256 07e20274ff2c395b5d15b73d21d7d16249023527847b236e3eebdf04f1031e9f
- MD5 23554df846a6be5d688943b6483e4d98
- SHA1 d49b3f7e0867f33e083ea5b83d8e6565f90974a0
- SHA512 83cb3d3e81a22efa3f401e90499abb9f9f5f5c5bdc0478c80ffe569edd15c01182fe83de1f607d0031c4e635d7c4a9d917c4db0c0852c4d3303368ba4dba03ca
- SSDEEP 24576:f52H6jKta2TJFu3JUoyIvvSSK6g2HC3L25LrivYxLYgCzQkEC1UZVb6/dSfzFWLL:h2A2TJFubHS+C3L25LrivYxLYmwUZVbw
- TLSH T1C92545A15B9A689F0101F45F98087E093CEB84FE3FE7879241652DBD39F10B487BA64D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\bn.pak
- Size 1.3MB
- SHA256 8d70d1cd1c3110e092ed8f3326d2d73306cdb4620a962dd75cd1a7eca05261eb
- MD5 1ee7d44977f6917d5e14e7e0d7e05476
- SHA1 4b06b826bdb178f346a3c18a64c64e4550836fc7
- SHA512 83766a0832e2469f53a380937eae26f1b5b8a12c3ee019de848549b93454953df083db73b63c5f9d85f1d19a050ea4d07c3ef8e6aa7786ff283076de8206ae61
- SSDEEP 3072:rUI3zCOdSdM+xvAlhK80yfUoSPTHrj3QgVQgQwfMdfVgI7D1U6/vGQmQl2uVFUP0:+ZdM+xvAS80yduL6wfMdeI7NvGQmQeu
- TLSH T1CB55F0209C6E81B2A8D5CDC9434C6330C123AE979B65F74DDC17A24938ADC7C8DADDB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\ca.pak
- Size 638KB
- SHA256 24a3af7f05e2c6368ae5470a74139a7d5230398144abd808077c39b9f5860c09
- MD5 f5e88c7dc750b17558f483687f4f8e20
- SHA1 d8a733e378334494b03f2dd0d64abd17e3751050
- SHA512 f4ad2880499d1f048b6c1b62919561d74d4eb2cc49751359badd60200f264101f99e6c8b9b674310e58baeeb5a058a09f7cba129b6c24cf01253725e74332736
- SSDEEP 12288:wG0S7+qilpJmRNihkKhHUvik736ADHl9kmkcBKMe3aRFUo1ORJsO5h5i+SpRKWR+:woewlwI32/bLuWH7h7FHjf+G
- TLSH T1D7D4F7238BC83B7644D3330AFB42C257F09CA9847A16D254F5AF1A1622CCEDCD677A95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\cs.pak
- Size 637KB
- SHA256 45c3114b093975eb3f13a5016b518bc0d09baae39287a01a5bb97590e22c314a
- MD5 8c2d4406bf343e7635381cde28fb22b2
- SHA1 8a16c9b62455ed527f5716f6cb40978ba61f2d35
- SHA512 eba9c7bbead7135182f53f8758e84ea786126c74435c64090c248a44a8a853f04e4ffd982dc745ec1b3ab833e16ed31a737e6e29149a05267d13bf2a062c0464
- SSDEEP 6144:I1PC/LD0sH6Bi7AwpazHBAFR2GOj8QosnmF7NJKiDp1aMqYbBWNeC:I1q/LD0sH6Bi7AwAzHB6R2GOS7C
- TLSH T166D46C1EEBA36135484002487BFA4228BD5E87540B6EA5AB7CCFDC912271B7ECEF1D54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\da.pak
- Size 585KB
- SHA256 b272567e903769c7d4d4722b147e138636538f36290b9bbc810a192fff5f3223
- MD5 6edbc491f5c0f73991c35a12d8d55251
- SHA1 654659be6886beee45806d6676fa0477d3a75bd8
- SHA512 8cc4f8b28935b34739f924ba2022cc0be0100de0a34251a33194f7a941d6a47c5231af7f133c26003886216bbe40bb1e68db5e10ee6d7d52495fe11e9e3bdd02
- SSDEEP 6144:GUOPPvsgZYvL1zVWVmAO7xmesPV0i0d4A+wgbszZhsMRQgIAlYEd9NOMxQpSRO+1:APPUZqmnNsPR+RQgx5OMWp1+eQN
- TLSH T1E3D4594BDC9C333F99A94765F2118DABDBAD443CC684664F74C8903A19CBD6092BF2C6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\de.pak
- Size 634KB
- SHA256 82a30fd2c5ce34ac7ebe00acc41e7263c02d988ba42bca2e72c57e8aafb94b69
- MD5 8f147069fbe9f031c4366dfa2ffbd9a1
- SHA1 0af1e2a5d4e96e8b272b09a780c72373ec25341f
- SHA512 e55a9802eb15c1691eafd7939347e2b863b4e05f491c58233fc5352cd9cdd9aec7692402ea57294737e0eb9894c830cecd477396e369674c60b7d32725cd3d85
- SSDEEP 6144:463Ft4uuCO6VcrLpfH7FMUutYC2xOMIyDzzjXA9o6wyrMrjPhVQIrYmNei:j3FauuCOm+ZbFMUaYC2o0zv3yrMPpXei
- TLSH T17CD41903ADDB621ED68673607701CDB77B19E36FC346312B94EDD02B660B5B282AD436
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\el.pak
- Size 1.1MB
- SHA256 e7a9d0025762e696387551865a9c71c2375472cf920b574d87174e2fd90533fd
- MD5 83b76162f389950b957bbdd2897c7d50
- SHA1 a6a865f5b9dfa91022b9dad15c962275af6f8a54
- SHA512 9ff06cec64d9b140250b89e70dfd46e72f30bb5847f1c843d5fdeee6c340d70ade7ee8c46588845ae9f985e7a7653454193336159b58898e867cf56dff94d0df
- SSDEEP 24576:t1T0eOaiB4ByGPe+CNK9cwyU7fOILQleP862IHabmvd8DDHfAxPxz/DLNKfUeh4I:t1geOaiB4ByGPe+CNK9cwyU7fOILQlhB
- TLSH T16035DEEFB0542DEE8046950785D8F07C27C66D6CE749CBD86229CB60BDF90719A22E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\en-GB.pak
- Size 514KB
- SHA256 d1667143887fca50383476082c025127bb4e4945f05c473f53894219a8edd1a6
- MD5 56bc11d89060e68b47efb6a5cdb3a14d
- SHA1 2bb176ce438e6dc4d980039c7ad77bfb5247e044
- SHA512 06c915ebae5bdc98d1a5f7c945e4bb0ff788c309fe2e5a4fb53deed81224055fa9eabb7f3a09af853ec2acf758f3646f09108c658766985c3e39664e30cf8483
- SSDEEP 6144:l70/P/amgP8SimvJfD6rLBcNj9kQEsAzgkhpv+xrU9pyslu:2/ajumxDKlzg5xrLslu
- TLSH T110B42C1FF344122909935272BB05A6A2FF36D06CA35112567CAD902C33B7B66C37B7E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\en-US.pak
- Size 518KB
- SHA256 58e27ecbd2ae8679be2776bf05faa2b2fb7606a616d448f9c9866b6e48a25d19
- MD5 2b5bb1693af4a6ef0ebd8d8f449e7397
- SHA1 31c43f754cc3292e5b045d085f63cbfb9c230d6a
- SHA512 83d99f7defd8abb393c020c2208ac60c304e57332259c887b3b497c281bce497b46cc566082d0c4c07b43c23b0020809ccfa3f934f46aca861f2b88cbde06259
- SSDEEP 6144:zMkRtYwIkXeA95jxTingcdw3Da6A5fhqy3bnrt9o+sF1:wotYwIkuAjV8wA5fXnrjsF1
- TLSH T135B42C1FF344122909935262BF0595B2FF36D0ADA35112567CBD802C33B7B6AC27B6E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\es-419.pak
- Size 626KB
- SHA256 874015d90dfefdb929678a86915de478d3c6d29ee1a46f54d4c555bbbd7cdf48
- MD5 612e23343ee959a75d1aed5bc9f62b1d
- SHA1 ec84ccb2688e511fea3ea33e463b1618d3aba733
- SHA512 7b97038bde02e8c59860d0bb2e458108a074055ae28132b85ecda03a839c9809dc9ee26faa777b00275ddfb8628cef4e5fce2002322f92d87f01eb0380f89115
- SSDEEP 6144:HSUTCO6BRRgWJ1/1TNAgGhhauXm/cbEhOlU0YhvwQpl+2dczGOBcGn8:HSO2yWJ1vAgr9nOlYvwQvO+G8
- TLSH T180D40922AAC81F5310E3A348F783D753E9E89545B508C25BE8EF866522CCF9CC567ED1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\es.pak
- Size 619KB
- SHA256 0a316117563288a07398538b01a775483fcf4608049418b1ddb9570e5c15374a
- MD5 3e1b354233b9f3b061b74e98441119e2
- SHA1 2d848a0f99e4b47bc55f875f104014b29e715964
- SHA512 4c22e1b1478000d65c55e12fad043b6872fcf13964bc1f3f2e49dc699bed0b376f3ab180ebe7d7d6b0f98ed7515823585769cb691e975fade86a83ae9e3728af
- SSDEEP 12288:4U8z2tVU4GKJeh5gYp9SHGe8Z1+jDiVnE:WgV8KJeLgg9a38ZwjDipE
- TLSH T10DD41922AACC1B6310E39349F783D753E9D89545B508C25BE8EFC66622C8FCCC567AD1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\fi.pak
- Size 583KB
- SHA256 c1e3b89fb91e2c100d9fd9e82f410bd3c042dd286e47f0cc4f145807fd72c94e
- MD5 ecd13dd933837a88f2bda2a867c5acbc
- SHA1 405fa13d88b3ed9206bf0bb91d41296d0401e409
- SHA512 55d9d3d2dac444ee31befc97535cbd5cf9dd959ae72375304cfa4c6dab42e7225eb24f6ffa8c67ef15e34eb0e74b1e05b18478e29a9828768ac50f871cd2dd71
- SSDEEP 12288:VaFxWh19d+PIARdIppBlWaXn3K9kOLn56Jqxusl1ttyJu/dc1JQ:EPkdUI98dHd
- TLSH T1A7D46C515215C32137C4C39E6DB0903EF6E5E39C8C284D99F847C6D94AEAA887DB237E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
- Size 5.5MB
- SHA256 5f08c5e0453ca7eb864f0b2776075b292b1cb4743d7e457d5311e62b6ad558ea
- MD5 9812b628adf64561c48c7de1ae609c17
- SHA1 c45f0047058f51a6c98ecc8397077a8a005d5445
- SHA512 6c3b1b2c045e9a4d3a6e2f4b110168ce6c5b2f5b4fb1f29a078a3ace80ed589d9c5fd5baba0c19ee00423691b53f7dd30531683cb236f25e5f8d0f3684a04189
- SSDEEP 98304:J6666666666666666666666666666666x666666666666666fwwwwwwwwwwwwwwE:ewMIj8CtsXQUGjVBO8Zd6YWjKVydZaYB
- TLSH T18846AF02B62160B8D80664F1653D6F7759241D27AB2187DF8ED87CA35BF0AC2263DB4F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
- Size 7.6MB
- SHA256 cac04b88255ca99eb316d581c66d7daf376b7169fb26999b58c3bbf5ca084f4a
- MD5 b6578ea3905c9936a998a3e55e61f935
- SHA1 8d3ea4bf342d39c5e008b1ea09acd767bc3b5f07
- SHA512 63b7ee4d7bfa01b62dc91c1ba7c54fea4f5b7228905e10ed64f98e3640c624affe3fa27c2db8dff6ebec0a93b6868a188f66c0b22430e65865032671695d1f90
- SSDEEP 98304:yshX1kAPBVHL07zbXc/jKST3oaWIO1majwesyOB5us+:ys96EGbXQ69sCs+
- TLSH T1A0866B13F19A11E8C05EC179876A9233EA71BC494B31B6DF0A9077212FB6EE09B3D754
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json.backup
- Size 2KB
- SHA256 d4fb8dbe438f2e4abae4d36c4b7e0ed4e06c5ca4601842cc65e1d953491b8a01
- MD5 7fe07739f4e6b2aa6b0282513a1759af
- SHA1 42edcb0d6b144b3827b3e630809d8cbd6b9fba7f
- SHA512 03a7c3312af17cb9c73afafc253d3e3305c519fbdd77705adab262ea089eb6f396d351c69e114e324b7eb6f88e7a216ef09d4ab877650cb586bf8ea8d530ecfe
- TLSH T108519465043A4030EA6BD32AD67F3A9C9A152543E81599D8F4FE021AA8C385233FF91F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
- Size 3.5MB
- SHA256 d49e8226c1229d81b856197ea3b753061cc21d0832019a195fb7deeee2fa7f37
- MD5 1ee67f858bdfba259c86ae6d135364e3
- SHA1 524004fb25fcf453fd6103fb6145be5da67d7cea
- SHA512 c58e354c2bd59e58d646de4eafaa0fc89db44030ff744b1fcc5f25589428a0a5360582d8f02f91666c8803f3587a326acc3cf8ef7f341ff5c789278b0e6e98b3
- SSDEEP 49152:32LtAQXW9x4AvdA/mcuHqXuhJP0Uo0XMe2rhXTxDyPIUfRnsaY8lG5Ig:8A5yrMzj/w5
- TLSH T189066C13F1D910D8D019D1794B9A9633EA72BC464B31B6DF0690B7662FB6EE05B3E320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\Opera GX Browser.lnk
- Size 1KB
- SHA256 712396a1f6e0f5c95fafd970679142bfd5d1897a73d33b7c3dc2e57a48a7af94
- MD5 331b8bd3180746c8345e235663f9804e
- SHA1 83e8b16cd70ed202c10d0e3f6e61749ac3ed72c1
- SHA512 4f6b3e09c062135c073d66a1eabce720ef21e58d10721a1ca7bd4d9709480a491ec33c88f9915e9f2883e3e9939052a9ae57631ec808c745f156cf5d4b475852
- TLSH T11421C2196FDD6F21E3BB5F3605BB2E67917EBC41AF47890C115043844DB5202A898F3B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\additional_file0.tmp
- Size 3.2MB
- SHA256 3d8fe736f12f1784f79b99e7badc36690a0ef17f7e13d661333aec8c727a4903
- MD5 2946fe6f1898bdad4a9ef10721fde52a
- SHA1 65e39fa4941fa45ce2ba8d91b1171acc417d0127
- SHA512 2b1e66a9d1154f79d44ea40f0c8b817666edc5d99645ef77dfcaa360ff14d9d80a538c6216c7068300bf2906c326147bc6cd5dc59433f84d0df80df939571268
- SSDEEP 49152:LkinoAw201shnpb8CIPPbinbmXlsAulv2DCtaxEgE3l8zaOROP+AKK1Dw8kE:Lkio1202nqPbbXyvAxoBRPF5Dw8R
- TLSH T122F533617AA18C74D13236331DE4B26D66FEB7D21F76469BF3C8072D0EB09424A1DA93
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\assistant_installer.exe
- Size 2.5MB
- SHA256 934889496e2120831200b50fdac5559057db461e93ec67a6915832aa95c2c2eb
- MD5 48c2786764a3c5d6b597bbe32574a256
- SHA1 1ab05d2dd18cc3a53b0d15cf3a3f6ec248745b05
- SHA512 9016990419651fb80c948ba16d48de8ba36b6ca56d293825557c4eb22326910ef1716594330f08489cbff4898ef95145422a9aa92f9839db006d0f567848f0b1
- SSDEEP 49152:zs/CopTQMN0Fiilnv7o/hyE+8xxp7Ey4Eq2KSMDZ5aobkeCbFhQHlwVN:z+N0FBhoZyT8xL7EzmKSOPaobkfFqlwr
- TLSH T19AC59D02A85460F0D8533173352DAB3FAE605E0697359AC79AD47CC03BB4BD2267BB5B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\dbgcore.DLL
- Size 238KB
- SHA256 53fd524e2e9b50369697a784cb7b47a65981619099d81a3dead96004da47475a
- MD5 814cacfd48e313b37911632c256124e7
- SHA1 49ebffb0be720e89081def5b2cb3757a2f6d1ed7
- SHA512 606e64b1cb524db0afaf95d9f9bd1c4496bd2f4dbcbabb0a16dd29a60befbc9816c70da2a88764699fa35bc2ad34c8d0f1d5baff6b79a7919736bcef7ac98032
- SSDEEP 6144:ggIASx0NdOiN9a1WpPNmiFZr09fgPczwishfCpkIJnwsnpb/xettJ:gWDFDi7yIJnwA3atJ
- TLSH T107347D62A6C48475CECB11B4724C7A3682FDD2B223E080D392549BECE9656D56F3C2DF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\dbghelp.dll
- Size 589KB
- SHA256 c108ea3ba05b254a1d67dfc40457686ed4a737767a3e282f9e67fc3fa4b8a6a0
- MD5 eadf347dc4deb05395147bc55e72f0bb
- SHA1 48ec572dcfaf6ab7e44d850b2286cba2875298ef
- SHA512 4f3a16d8cbebf145a6674ef718a5cda912d985bebfd5613d394d5227c58e3bffd7d991300ff221af9d83b0d5b17c8928398c23a8e6d9ac06882ea7acf851eddd
- SSDEEP 12288:QUfvs6QXZkBkp5qbhmJLKAilH77ht8YO6EIW:/fvfQXZkBkp5q1mJLKOYO/
- TLSH T1D7D47D71A9C04074D5EB22B0296DE73987BDF6614B3091CB63444AEDBA607F06F3A397
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\installer_prefs_include.json
- Size 1KB
- SHA256 5ec5d03e37e3ab96a18295d5c4ce3bc5653a4e03f3d353b731379fb3e8e4e4d1
- MD5 514877cf0977d2a49a74160b7b502eef
- SHA1 5f2c09c212da783bc67e613ad714e6ebba20af8a
- SHA512 9288b95834032f712335900a805db5d09999fdc693b6f36054a2ad9c184c07a0d0b614d3b05529a8afd5dc82779ad72b4f50078caa23127407d711f9af780ad5
- TLSH T11C21ED95583A8030C6A7C715257F3ADCCB042A47EC029ED9F0ED2259D8C242277FEA1F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\installer_prefs_include.json7aaad8e2-f96a-4a01-80b3-7a0009bc0d35.tmp
- Size 2KB
- SHA256 b04465459dc19d8674638d23c47aafaeaaafb6b7e872e22a9f150f142cf21707
- MD5 5c69ec9cde8512352abf00fa5883600d
- SHA1 ea2406a45ab781d885e0c539061f478854207a51
- SHA512 f5437a0667b8276d43475a104b3a066c3a45212493c7cc290f904ce27ea421bcb27918e0c4eb057f67e4bc369dea107110295054d78f120e20da8cc7ed60afe7
- TLSH T1BB41536514394030DA6BC319D67F3A8CD7052A43DC0699D9F0ED1519A8C782237FD92F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\installer_prefs_include.jsonb4a57c68-f88c-4a7a-985d-2cf994ea4f78.tmp
- Size 1KB
- SHA256 a596551f5e36595b831a6f74cb65f3530a1bd5d9ef35f8bcab1900b952096977
- MD5 4c560bcb96fc35fd8210a0563be2fa11
- SHA1 7c2212200dcdd94c1578bf46ef53be6e911a5e67
- SHA512 49fd96cdde2e8cef60b2f5c0cc878ba7aa9dd56dbf9ec5343269b19d0346fe9f3191f3fab8841903165ec234c6e181afcd53e3b6b58de8af0639e2b681965d45
- TLSH T1EE21CB95583A8030C6A7C715257F3ADCCB052A46EC029ED9F0ED2259D8C242277FEA1F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS020925C8\installer.exe
- Size 9.4MB
- SHA256 2df5559bbca8e95b320e3b7cf580c61970043bf485505664aa21c9da2038739c
- MD5 33d52750ab8ac346d54d6fa646456a2c
- SHA1 1ec5c9038f6067686086b3b6011df5f20ec0d56f
- SHA512 75d39399d11329141cdef4cdda932ee65f43c145515210d4503eb86309560732014d9598d7be5176fee8b95dd620c05f05f98001da0195ce62995b18a6f62d14
- SSDEEP 98304:mSSsfoU8vmUqJqTL8pMvEsQyQP/Wh6zAbK8YFBI3++wteEmg:aSoUQ7qIP8YbR3+Bqg
- TLSH T1CCA68D53F3A611E8D06ECA748B7A523299757C464B30A3DF0AE43A251EB5FD45B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera GX Browser.lnk
- Size 2KB
- SHA256 446ea4cc59029cd2838ab532e7f1dcf098b0288e78ec042d8b3ec421ef2d3aeb
- MD5 059967db025de3f6cb2cd67100e7a0bc
- SHA1 9c8a928420639fa857246227dcdf4fc9614c846f
- SHA512 9479201ecb5ffb31045c1e25851d34285ba4283c0eb27bbc1530aaf0769179fb5e0c713bc19ec0d1d1ea88bbfe959aa449c28d3a90529c7af6be8fd4c25492a4
- TLSH T10441CE943BEC7E21F3FB6F360ABB2E61463EFC51AE57890C115042884DB9501A899F27
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
- Size 40B
- SHA256 11b721589b4443b63ffd0d2dd05339a61cd413367e4a808b10837f2bcabf260f
- MD5 5101f5f191e5cbb056443f1737946990
- SHA1 60735b33fd3ebe7e84661345a971e15eb3d8f928
- SHA512 dd4d7cdddaf1d5f8cb46271e82dd6f666130250b33d819bee4c0315600840370a2b5fcc4bf6b39319402faa53ebe3060b9463479dd2d19f2d380329a337dbd6e
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_1
- Size 264KB
- SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
- MD5 d0d388f3865d0523e451d6ba0be34cc4
- SHA1 8571c6a52aacc2747c048e3419e5657b74612995
- SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
- SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Opera Custom Icon.ico5efe8967-dc83-4489-87db-527df61a3f9f.tmp
- Size 162KB
- SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
- MD5 6c07e783fb8030c2aae67919d45965f7
- SHA1 46d2d931e5049884b4e4af1c247fbb1a25b6edea
- SHA512 f93944f08885b666c7ad9ab5d7ea051280cd636286586fe1ed696ad67c3b43683fe87dac24bcb9410395acff59a5b0d12d4c12c2f44a0963af2cd93c939a9aa5
- SSDEEP 1536:EEJFyMduylKOn7MU+AO8iKqqFG0urH6PtOE:RHKcuGjFhurHjE
- TLSH T1F6F364823BC1ACB7CE92A6B52F7CD4E9B372F5084746572B7FE1A2718B9D3180950139
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Shared Dictionary\cache\index
- Size 24B
- SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
- MD5 54cb446f628b2ea4a5bce5769910512e
- SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
- SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Site Characteristics Database\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw
- Size 509B
- SHA256 eef5226fcbf052bcfcc182e63df602dc43363ced969801c72b435e8c0e85109c
- MD5 be575713da023f9ca7acc9f005d49312
- SHA1 3dd3040e9a02ae536cfb38e0c5c8adb63596337d
- SHA512 e7392b3efef2f6a0aa42ec465c038d74d44f899b2f7558bf6ff9099e96409587cf7c8b8ed72b64fd1fe6bf029bf800b51f70b002898af47e01cbccca9d5b1333
- TLSH T15FF07506C4FB933F201D391704AE2D80950C2361924092940D81B1E8E1993EA3C68A67
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw0c65615e-c2fe-4f8e-9923-568627a8f518.tmp
- Size 2KB
- SHA256 619c4fc39f0ef8a5824403a2eb2c6aa12a68afa764b7a062cbb68b1fed4a2bbd
- MD5 707e05c80c90630f14d2249470582b67
- SHA1 746a09db8da2ab5d7bcdbc179c93026e1615cbbc
- SHA512 8acbc8a530e01d4b8dc463e2d4c098837cfaaf9f72ddac5c32258b5266a9f431029519d6c4a5b6b0c029b740ff634f482ecae16b2eee2ad56ff5375b2c3a7a8a
- TLSH T185513C6B42D57458A857523F344DA62BD1C1293B9060867CB39F13CB4472ADF5544739
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw0cdf76e2-f75c-4202-9216-21915f386815.tmp
- Size 9KB
- SHA256 cc079e4ae647f7824ccb9b7d6d1f9e9358e341520eb632ef06af1948414d3042
- MD5 2efd462a20af2899231c93ed563bc5ea
- SHA1 6a63bd6fb83cb678ee953bf209eab3a53935c059
- SHA512 267c383f678918634c92eda75e8f11d69df687fce342700cfa47bdce6ab7601b8bcad20f12feb83bde094c2e91796ad77a861e63a2e064a84489747c3fdffa14
- SSDEEP 192:l5ysofxbmRpLB9Xmhd/DlgaReUTzJiXsXv08aMdvFmQbRtUBlVCISjc2:+siyHL3OBDL9T8sXv08aMxkIRIpSjJ
- TLSH T10522D091921444F92E3709513C6382A3291BD0A588329DE4BEF7FFB7D674261D7320F1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw11e22c05-0f11-41e7-88a9-8bd686dff24b.tmp
- Size 11KB
- SHA256 033ee7f1b12770ec088ecad5ef14a5579de8dc581c35b912338740907ca23a3b
- MD5 687b87bbfa516c8d71b22d431585fc52
- SHA1 6880a7aec4111e00a588a7a05d8a773df3ea1a00
- SHA512 3c07775b1e1ea7ee842a789e25d931d730aa805504b27c9f0f61f979dc637463d1a488829cb83f8d57786491929438f1be08a4caf02cee28980086e99608c91b
- SSDEEP 192:7MX9NDCc5xekP8F/PfmyS39QUOcOpm23CGbkz/lTOKhf6Did1xG0+b4v:AX9ND9HPQmyS3dnOpm23dxKB5dXG0+Y
- TLSH T18932D1F66BB54B459CA728C31E00D04B2A8AE7373C7B577271729364385F8F801CA472
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw1d77ebb8-7c84-48df-a1b6-6adeef6efcff.tmp
- Size 1KB
- SHA256 b8fbbb2ec9e56aa84acbea51b84363af19ac7f859166dab2126f766e0b5bb69d
- MD5 e39d0623a61dafea74f94ee163b3f5c4
- SHA1 cb30db19ad888fda973e583feee755690aff3918
- SHA512 20d8ad1338b0a7a6060667c7205771a2aac62a29255785d7d70d05d206fc485367772b9895bf94c825faa9394615eac4c4425fd63c5ee33e8a54aa850848dc3e
- TLSH T13D3107C842E003E815B33D8182D812C9F0839286942BFF363C9C2140E229B4A261AFEB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw22f764ca-4667-4cbf-b1a0-0a2b5b61e558.tmp
- Size 9KB
- SHA256 d5a503b4a2bdc0b2ec533f09f33557991c30b70bd5c7f5e9435a6cd417f48f39
- MD5 87be7073fcf9a910283ce92d32767828
- SHA1 a0f9c8d33b4c53b394c48312d538868c11fa10da
- SHA512 9eb7edce0ea8e191268f0b2b3ddea089c4c7487c2702e3e562a243123b6b6ee524bf7ca947f2999c62c0be127bc3786e75a7054af1b5838f28ab2b304f9d9090
- SSDEEP 192:2fUbV/uFl/qLRwaF2iicdOn8y5SpTkl+ig7hPkLVHx0Fb0HC9/+wd:B/uenFycdOn8y5S971khHx0FUaG8
- TLSH T1CB22AFA0EA4AE5F07ECC55D238B502530DFF3A0F217A102CB6DA977AD480D1964C78E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw24debc5d-0f72-4aa1-94bf-9cad46f900a1.tmp
- Size 2KB
- SHA256 c3719457fdcb19d864a0fe04b32967d5663c3d48346e1f623046a87c790af148
- MD5 12cf1e21ccf6eb7f84b935afacff0341
- SHA1 66f3a777d30aa6f7e54cccf3d18d508b068f66ac
- SHA512 a6b313a0d21213542af53ed5f95c74abbd6eaf3882e32eec4a968c651300f749c7e2c788efc56d02cbabf473800e113ca6e868a4030a71a9dbded8227726294e
- TLSH T153513C4761FEF4D4F056B3454021B1D23BCF23E9B1258598755E4D3327F189A97BA283
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw2a9330ba-858d-4258-a583-0671317ce764.tmp
- Size 9KB
- SHA256 801a8a55721d7ddf52143b363b6ffefbb68bf193422d4dd7042c49f7deaad3fa
- MD5 7862745f6a7bbc5693a53e61159c9b4c
- SHA1 931c1a891b2ffc1c8ea7a3d9c155dbb49a1aafdf
- SHA512 18c94bf55d5dc6d249a1947143cc599f6006f75d5ba5d091f9b31776fdd126b58eb8f80d0580198574f6a286acb26c780183c6ec5b83750b16441ae8468c66d5
- SSDEEP 192:jHwiSt020TGAe7EIPFs8SPexkRcepUwzwR7YvYrr4fMH4IpptToaOFNoIfDpc:jl20TGPQICPe68dYVfMHZpdo3HG
- TLSH T12812BE7436778565809364F58133CA029D371F1E294D3FB926698FEF49F8D18A3B021A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw32713758-a155-4841-90a0-000052949b7b.tmp
- Size 733B
- SHA256 f56acfa7d0c1cbf184a3c8897121c4a205e1cdf9b1561e3e86bd7158e58cd9cf
- MD5 45a946ade5aa38a976dc2be5473784f8
- SHA1 c65a2d19c34260aec73eca1f0a3e33bbfb004a12
- SHA512 29935e45b49c4944fb44925b29eab8396c03072ace4cde2ffda40349c2a4a188e3180f6125c3697c3e532c7d34fe9dbd29e0a6bc332107b67691d3a760b4fae0
- TLSH T15A01BA534240DE21E2F38877AC592C729B494308214E7D30058CA49E8115CC9980830E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw34b2e611-ea38-456a-bbde-c2f41d833805.tmp
- Size 9KB
- SHA256 b2fad10042a645a9753dd2a5097ce9eb44451c947f97664d248b0d7cf608bc05
- MD5 9a7ba4cfa0af113f9fa59a062d718b43
- SHA1 f8fb1dbd196544159c05cffdd57929a0f78b7e18
- SHA512 64086f0f0dda4083b45c22710cbf56203caf735ec2b1c9a594167f6b89f3a12c8c9a06064ae29c617c686d0d16351c19731eb283813e9f4944a08b471cdb7eff
- SSDEEP 192:3AnWNapN2d6iM4bFTPX9TwiQdP72ZlBkKRuGetRkcNHN6ge08E9lQl1oifGww9b:KJQbFTPX9TwiQdPCZleEneJHlxQl1FIV
- TLSH T16712BF93977791C0BF044D2C5807D479AF41266EBBC1A72DB24FB84A42094977A5C3C3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw3c8e6b95-ee1a-4adf-aefc-7c5139dd9922.tmp
- Size 9KB
- SHA256 79ddb03cb6ff1e39dc0995a1acc8288d6a981039768428dc88d8fbdffb36af41
- MD5 482993cdbbcb2915cb16686abe1d0e84
- SHA1 5c5a127989cf0560fb6e53b7e217ed4aa4119a3a
- SHA512 2a9990cebe3a56e0e7d46010991c05ef667123627a6f934119ee4f98bfe1db8871176cbd1354c58c1a7ba9c906e5096b7c5e188d834c427db51c0066683fdc38
- SSDEEP 192:qAiwB/5FZVZFkUETSKJ20FU3A7fK6+ny5w1hTcmGtQOg:qAikZXFZKt77KJLTczTg
- TLSH T17E12BF77BC8253D680FDDE4F49BE48AD2990AC2DFB7C9F056425A1109BB43236B440CE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw3ce5890f-f6a9-4477-b7b2-337c59640359.tmp
- Size 2KB
- SHA256 67ffd3ebda5f4ba4e4191ea53a50301b70b5771ef48b3cac999bb998ded13f2f
- MD5 10bcb6b751c29bc810d00b57ddc524b0
- SHA1 4437deb56f7d1db24bb6b697debc42efe850ceee
- SHA512 e42fdb04631e3c221258bdb4ff115d4e0ce4e1822cf2b71894858d573aa9802edb4ea55fdaf970b6cf9f34c0d938b858d333299023dd12dc15abab7055f24f7d
- TLSH T146512B60C738A28BB671CD8488523C7BF7FCAF469DD46A74CB6517856F86B3450A6084
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw3f72b7f4-66c6-4b52-867d-e73ab29d1ceb.tmp
- Size 10KB
- SHA256 43e7b01c086fe38ea475ca4a4d40a7c480a6044ed1c8147ff8a493d430b45c63
- MD5 8f6178b72aa51a19ea3480d0f64efed5
- SHA1 bf3b1c3e9b489a3f70733b31db9442b92b8c045d
- SHA512 388ad108828f370b39787662961caf0fd7877b59d0de8b99133f05138057bd6674ac0b804568ce5980765b611524214789c84ac322319399b6a52e5d48e973c2
- SSDEEP 192:n103M2pwJtz8ApCpififVJUhnMramNKiY23QEulFFLvS0cQlv0:n1eMftnpDfoVsMJYN23QEul3pcQls
- TLSH T11422A0408F5A412A56F735223DECA390D039821C6E641A9D6627F5F7C4D5F88D275F82
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw3fb0f883-0134-4fa1-99ea-8c037c98eac3.tmp
- Size 9KB
- SHA256 9a5c029a7268b545dd8e845616d090787f8f74ef03cdc0e072d7ea41ce831fd8
- MD5 3387e9ab1337525185ab424d0e075d69
- SHA1 adc161d095b45c299eb754c1807eaa567d2ad3a1
- SHA512 f285ac7f54f70174d1000d38430bb38ccced219cec990c154589b71fd4191c8779e232bfe490fc28c68a69e9ef7f4d485c2ec64da18b36c014754cb6ed0570f2
- SSDEEP 192:pmUapKsrJLkqUSpsTX0KZr5zjDUMn5dptjZ4CcSWECoJNWgAuzyMgjA0vcOZ:pRM9LkysTXztBH9ZCCc8CwN/3t0vcOZ
- TLSH T149129EB9BE29AB4018F71751A95BE6C191A446348E80C9DF8C5CCFE5BAF12333D87319
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw41e2d93a-d486-4ee9-8e71-a6cf91318f42.tmp
- Size 3KB
- SHA256 b507ff9cbe0830081d0e0b68cfccd59e36c4324af399e4e19cf14af1318ce12e
- MD5 7a322a5416b89bc4078f8e34fd67a0f0
- SHA1 ecce3a6a2fd75a922bfa7aa1e1c1d54cfefb4a55
- SHA512 84fd1bb348b908178d23c42d6a4d819499a97bcef98a0e67ecd903d316101884bfbcaffdd20bb0db7a9d8d96eca558ba7a686272493c2270b0f3767e842144f8
- TLSH T11F716D48589085440C97DAAF94970444898ABE2F33AD19E1E0B6EADD59D89A03FEC568
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw4213ec9e-7c5f-4e50-becb-35aafed3bbf4.tmp
- Size 3KB
- SHA256 74d5e9d7f730528e8b083006220b56d413a9ebfd7b6aad80f50971e8456bf95c
- MD5 7ad2302e0f6a74acaffccfeb1ad7887d
- SHA1 fc63bc4d0e081c70a3a29c8e203f8bb1d975bbc4
- SHA512 87156e982cd02ce58a4f22d573a605da243324292b888c658fd0a32658db789f5cf9f494b0131c0c70e93cc316032c35f6924b2fbdfc5233164cf7509d9a663b
- TLSH T1E6715C982483B6FE4B1ECA58E39A806F430FD4D79B5C0EDA4309C9C117498B3DA50E9E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw4e41f370-dae8-4c53-b3e0-be79511d37d5.tmp
- Size 2KB
- SHA256 6e331b3d0f3dfdd2d904d7b24e528f75cc68fa2b97809200c7950251cb1ea54a
- MD5 14594f4844cc5147304b5589bbc2b09b
- SHA1 9183c174406b1efb2d4bd913b453ee1e3208feac
- SHA512 a77cdd72f68237bb885ba1f24e5a91aeb41b840e2f2f50e4e1dc36e5e79d1157cb741eb0dc7e48ee5d85444577062b4066ac1e0f7b5cc8373a93bbf2cc68be10
- TLSH T116513D095FC6F664B4BE3BD748873273CA4DA25A5071498A00D5CBB91B449662E59E08
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw579ff1fd-406b-47fc-88e6-e1584377473b.tmp
- Size 3KB
- SHA256 8da95dd611f6ef1eaa52bda5ad0eb2493ba684b738491aa1fdb4a0e0c5ae54a7
- MD5 d1c81bc96e3a2bc7a52caf013c97d6d8
- SHA1 c347509dd3a7204fe40fd060e5740b8ed8335e00
- SHA512 73977afe73f2dba025e566eadc66f97917e9cb0871b168e2c4813af9547d61c2f07f6302a20e6716afdbe0350728c400126395c381e1e61017e3fea0e1607e98
- TLSH T128717E6C295E77FDBACD3410D92071447808393DDAA87825C9E4F1756A09D7F4886258
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw6512a69d-0e84-4fc5-aa46-b03a182bdc87.tmp
- Size 1KB
- SHA256 9ffbefa6487d3120eb12259c7b978aabd7e2752e647087472584be24f6e70d3f
- MD5 32c1485f3763d81e3e085bcef78b782e
- SHA1 015d10b04112864405ab04beead57a5ce7091bde
- SHA512 2312acb1eab1a4f5783bcf614764a159b855ca5668c931d2c5df30b1eeee0c3e677c5101fdbf4344180031e4224dfeca968699ae45520272c0e7278ffe0aecc2
- TLSH T11E210AF9E9FD75B37554042075465C3DA7BB2F2601E28962B7CEC5FD14AEB20C40D024
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw69830eae-b0ce-4ff1-96e2-a7ef951b84c9.tmp
- Size 1KB
- SHA256 2f8fbbebf7c5a2d1e84d7877bc7353b299eda01462965fa7fb777d89236d6942
- MD5 9a3c0fe587cdec4821838dfc49104d0d
- SHA1 5d956f23115228884f16beb68d90f2d9f9b2491c
- SHA512 f92c0468ac654030271f35426488d6b334f339db973f6d771e48980e1af6a6116360bccedbac0e648d91d6c64bebe4994d98401629d11810508a12e5d6a3c7e4
- TLSH T12D311A830ACD8E37977DF0E00018A27D6866B5110E5DB1D0D78F6B4B2AC093F7760814
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw71c126ca-3277-46c7-a097-32426ec3918d.tmp
- Size 605B
- SHA256 ef88c09d49984127df3aa637a21d0a0016f688d80a2012430738e8ebab1ad045
- MD5 21a47c3ada1b7b71f5ea24e58bfc5dad
- SHA1 e6d3d9b89e9ac12ab727ced234e665ec4ee205d5
- SHA512 43d3b26854bfd16ee3e643cb2b72a97b9318976272555d05ab87737a2de2d79a9137a785b0707b30ba930102e73b1428143ee985e11b3d188c539e00e9bc71f2
- TLSH T11AF0020902369FC9C8EC97AA511908F4619890AA0487476600D538CD8A73EAD45F7AE9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw74649e23-6042-40dc-8a5b-9eaf97e57523.tmp
- Size 11KB
- SHA256 13c824c82a1e36d1fdf9ce0df2e7ba6939d0eb24564384ab044b719e7ce7d7b7
- MD5 ed4aae149b18bc670fc12c2a88ca0370
- SHA1 1a563ab921d9815cb8c0b562f2d037d856643521
- SHA512 594a2c692594a2ffed4c20831f7f03acc49795159836c51405a34fc27477d62cf356dd0e7cf81c92ac5e032b1e0373c96e47f78475343a0da7dead60c720b011
- SSDEEP 192:mPETRUyaiQwhA7PD4/+APYHautn/d/LOuNwetBLt2u4CR+mGenU4:mPiXDQwIPc/loa0/d6uxJscRCenJ
- TLSH T19832CFB308A788DBE681C182E94BAC4C1D2150D77FE5CAAD5B316046658F77D8848775
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw760c5a65-3684-451a-b2ab-db00e5579804.tmp
- Size 10KB
- SHA256 5cf33bf97dba10a32444a7c716d0de219c0d90009ad90a687c5df1cfe8ebc060
- MD5 48a7f2df627ce903c51d41d8f357ba19
- SHA1 0bd472649b77124bdb58ecd9c9403d6dca795c92
- SHA512 189da74350b9d1d472d281eaff4f05c1b072557f4ebc08647d67fa02de6bded60da1f4393e68ce7ecf9907299bb784d065b6a90e69c23c04ad1ced2ae000b03e
- SSDEEP 192:xowwYMVOpFikbP5rgRHxcl02jlOLVYF8GR4wHDcOgB3iOUxev8H5fEYIdXWKr0P:HiaF1bPJgRRcl02j6VYF8qbjAhiLg8Hn
- TLSH T17322CFDC860D8747E8BFDFA15013FD82265A9963E889876FECC6896805E1201E0FC988
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw76d0cae8-379d-4d5d-9cd4-902901bd9201.tmp
- Size 9KB
- SHA256 3b8191be0fb908c99a2b49556442c289da887a324b690591aa48ad64d2c4c1ec
- MD5 409e3a82fb61348a119288f19d35c505
- SHA1 8bf74e6d78284937ce99d85c3c017ca398198177
- SHA512 04caac043256b0f1f03e2f91ba9c97809bf65c51568193c691309c3441341d816a53623c83eb2eda6659f06f74a773a82571fa21ed9abc22919109c456c8a284
- SSDEEP 192:InCi+2yuYRmurpPc620+THM6nEZ8hC2Z1C97mYg3sNRWRHru:Iqu+pPYJLVi8Dgg3BBru
- TLSH T19D12BFBE14AA85A73F1409B790B515DC44DFC5CD862E14268EA3A89032CC6AFAC1BED4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw77777d7e-48fa-4b68-9b6b-a4b562e96c60.tmp
- Size 10KB
- SHA256 b9d49f57c6cfe02b65d801423a0cc372d4f20faa78c554bd2fdb13db09343d6e
- MD5 11d60a00a0c5f30cafc95fbb495e7523
- SHA1 c18dc5ddc3079609c40a527b0b768ea3971bd602
- SHA512 f865ce35a91b4120bfa1442d4e37f78c7a1132c925c9e1a9bd2ae338973c593b6c3cc05af04e8a447d6af006f2c135b52a366873df2c11f2d6e867cd4271e282
- SSDEEP 192:ak9WAE990N8bsq9at5BQ1v7vJDEvrwwcTovWZO6snpvIIoN:dtEJF669vJDEvUwmTZO6sz4
- TLSH T16922C079CE07439A0B58488045E37AD3CF5CDF16C89F6E8B5F5AB2A98AE2710935A481
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw7916689f-aadb-4e36-9a51-af1d7f642b4d.tmp
- Size 861B
- SHA256 328578fa6041fe822a5e309ff16e3d44ed189c0888e31126d06b92dece8c7c6d
- MD5 3e556dee4a80a9a7ff04a71d2ca1f320
- SHA1 12ad7a1924c6f39da3cca57c40f2564996845238
- SHA512 0365155a91ac2d3a5c542d83f35b3d3b488b64f91472182fddf3af21249b9c97935ea1a4eb0a136b769b17b34803f93bdbab464e8c979fdd622078731936a7a5
- TLSH T16A11638D16825906275EE6F45E359A413F3A88AFFC403A5610CBA4AC8869CC160C952C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw875a4bfb-0e6c-4889-b15e-fc92ac0039ee.tmp
- Size 11KB
- SHA256 a1ea3a323294ce440609d859de067ee24faa6f331fc217d6192a2c940d6859fa
- MD5 7f5906e83f89aac600b231143e921656
- SHA1 eea92726e7a2c2e999b16924393d2e51c937c33b
- SHA512 a4bd612a74fd6919d562a7def08adf067b58f2a79b8af47b3af54cee23b8ef59c9b8db043126f22cb705222ce71a3171573e3c250590ed59acdc018ad219b90d
- SSDEEP 192:AAkYvx63qXd9Sw9DnhkQKiRwMzix13JcbNmq14KXHO2BgW2z0CTXEqzpbvjHz:BYaXbhhnhk+RwMtmqB3KZzRz
- TLSH T18532C0F38A49342A479D324AFA7684B0D7F381B55FB0A36D1D94EF0CC466055AE70928
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw8af3ceec-efb6-4af6-be32-a8a03a728e06.tmp
- Size 9KB
- SHA256 57cdce515513f24e80c4430e8799988a248a021ccd85d3347ec4a5c6dbe241ce
- MD5 6edd3e51907dd83785dd0b13879c9342
- SHA1 8c05d1e3a7d0306de0638dfcb73160ccf77c41e8
- SHA512 776ad05fccd7a4199897f8cdaa7fce9220a4f92cfb0d2834716d3840bf4ea6eee78bf55cd08689acb12346528054dba094ffa5946085ab08417f708fdfbb776a
- SSDEEP 192:vlz+T7gt3liVPC4K/ZKV31CVABSD+N/WMHp863eqXJnUPu:NPVsVXGZK9kbD+N/WA8Oeq5F
- TLSH T12922BE0E1AA1477E025AB754A110EFBCAFF53F8BEC9E5BA53E44684810E4B1A344F03D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw90c61f61-c83b-495d-b8a1-13559be78f76.tmp
- Size 3KB
- SHA256 f1ddc74ccbc38fa498d1f4d0946d78ed53b2566a24c9bd3716c0c1ae77d4a3b0
- MD5 c62feded61dcd023ada93945b098c9fe
- SHA1 f44fd6b5cb1558947316c8dac9d49e55b25ebdc0
- SHA512 d19b8a7c0fa2fa08586b4862f2b4f67df3e053d1595db93bd6c105cd612d79196720503917de1f8ff5c4486243ce26f65882fe657d9a77ee500ed7a0fdb8a8e2
- TLSH T188617DF14AE7A0327576F8901847C17AD500400D695746C8055F3ECCC07E7E0B6EBB82
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw914f8c84-3aba-4cda-8a3f-376e7af53654.tmp
- Size 8KB
- SHA256 453ace4c6c05a1d1157e909a717e4e951ede0dc84e918afbf3f2c03f39769341
- MD5 ddbf71af24936b299526436bd08cfa26
- SHA1 b75da2e3ee5548a8e52c205265525a51c41c64dd
- SHA512 8574ac3b211ce28b4f5db20a3b67df84564ca50d50d949a6b5504ecb213b13a386ee183049e533b50486a3f975a63996193b8f5adefb26e73e0575110050e3e5
- SSDEEP 192:KOh+5RCqUa47dqrf2i0V++2bF/YNI0Nd+OQoYFRBBAnpX2NMaj0F:1+5RPXkqrJg+HxYNI0wFRk2asY
- TLSH T14912BFF2D814C9E782B7FAC1C2245C426AC0CCD86C1EFC811F1395C5A6AC9B52B3223B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw928041e7-120e-487b-885e-5f4ffc7f1616.tmp
- Size 9KB
- SHA256 fad453c4d953515deddc58ce48e29f1f81c5a86404eef2e22ad1727ffd5032c9
- MD5 ceb963dc76467fb838eb8756ca6bad25
- SHA1 2a58f926e73a0cb46a2d38126ca2a9a80343559f
- SHA512 cc28df992189fb72e3bf747445cee2087db8098e1665a1c0aa3c5869b05ccc5d38a59ca4b46d4bc22eac9d1fcd4d94882e50fc59e2e5ef603d3f153dcfeb35d9
- SSDEEP 192:ck4Tlr6PP6dQ9gf30Mq3kG19QriD0b1W+C8Mv0NflYvWE3eLoZ:ckoFOPsQ9gfjq3nVIb1W+Cfv0N6vh3ec
- TLSH T18A12BFD5E7EF2B6BB31611B83CD14854974350BB3887A22EF839471097A97C3886A6B4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw9812bb8f-2531-4674-bbfc-4914653fef10.tmp
- Size 3KB
- SHA256 c32f278914fd6993fabafb24c14fb990e251127d29ebfbdd1cb9daf2f448d02b
- MD5 7718a378c1ed51691be8f9ec19fce76e
- SHA1 6d2f898616f0583e8e2d822f730354bd95053e90
- SHA512 30d3bfe7186c442906aa0cec8bb48e0311de2d326e015e5013f16334fc13c1513912eadc27631658b8f52e733c6aa291612badfd4100cddaf3f09dc1a93c91dd
- TLSH T158613B6FBEC644C2A4F2BDCAA345A5B76B42C243BBD18F2263C44519600CF40A547BA7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawabe7f2c6-f5dc-43a4-9585-234545c5c6b2.tmp
- Size 9KB
- SHA256 fd0f28c683250f2481daa7614eefa621d64502e79bc8f97b7a7bbb220f4d4776
- MD5 47343861a7f19c414c8ad2c14cfe452a
- SHA1 0c87d7e86a1f5504c6773aedcce4d5e6f2d12443
- SHA512 b351c1a957fdcf0af639ff2325d825633b3b6087467b46ffac7234d907e6ea3350f14d8688b3098445aadbdd968b7c871b11edff494f9b9231e39302f5ec0fe8
- SSDEEP 192:83WQAR00vhyJbgoLOHI5FA+ajXajCU3i2fAFnk9J6dW20I+50gXrPg:8mG0ZELOiFBPCyLAhk9aW2ZM0g7Pg
- TLSH T12A12BF96960C477D5B6F4941CACB056C4E13C8CA83919E0532270734587CAFAA8FD1FA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawaf1bf1f6-d0df-476a-898d-f8072a8fc70c.tmp
- Size 3KB
- SHA256 cd0d304b513580fe32895be16c83fd0bcb9c00222c09f784332b7f82eaf43205
- MD5 97695ce929f1e485e2ac2cca2b1bd7d1
- SHA1 e91c840b63873a6d3ccbef7a7f2d26221aba5a68
- SHA512 a7a2b8c046dcfc84877ac6cb835b67f6911b67af9567b86445d2856dc31252ba92590b62a91aa863eb99282976362dd7eb8ac3d51a5e91cf6f679049d3fef586
- TLSH T107715CDCB5A6BE01F64C08A390EDFE1BC9825950D3AD0FB9B32827DDD7442022E56F85
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawb7413a6e-fe60-46ab-bb36-442d873d947d.tmp
- Size 1KB
- SHA256 8145a652a7f46e3b4d3301be83d1fa936baf06519bb8fed3cd72a21dc0b620de
- MD5 90179d4635949f5841537a4476c7e81e
- SHA1 1b91406b0bb3c28bf6befa18c6316b8753658db1
- SHA512 d8c619110a19d8e15d75f9d77ff2d6b99bb054aeec11fcd21c05525d628d2ef0118ee1b21b12daa2643ce3cdc4b0fdd2d6cc1950b1425875aecfe76347827130
- TLSH T1F2210B2CE40A7030DE4D2902DE914F7DA1FA11B91584634C108F6E34DC1E0158631AC6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawbfc4a239-22b3-4f62-953d-b264979a98c0.tmp
- Size 9KB
- SHA256 cc56820c78bf459b800ea8a213d6cdd7469e82e68b13cf95d94fad18dc85a943
- MD5 b8b5c75d48a00ba18659902390644d62
- SHA1 5b31e7c96bbe40ee04cca19059bc03c9aabaac1e
- SHA512 7cc87cd6e5f0e8987e6a3b0c0a5537d81f9fbb83d12e406e0ff758fc4c89a5cfecaaee31b65cbbcd39f8573446e6fdef11b648017fa9b1c48e93d0b059df87ae
- SSDEEP 192:McESa+EnzOyL6i5wFtPKSR+9zna16HPnxsKGxCM/i6GxwVLEWJk+GKObbNP:MmahzOS6J3CwaLk2eKGFi6Gxw6WS6ihP
- TLSH T1D512B1FB843E4F1E3C92318AA60E2E312F7C674479629B90C49D70D8711F994E5FB115
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawc231ebd8-95a4-4512-99a0-0833fa4f8e50.tmp
- Size 3KB
- SHA256 5246b14ead9935e86e39d11b04fb854f1da6f67e8c8c9ad0e4841cf13d871d33
- MD5 83fdca03031fbef24e2424fb813dc8a1
- SHA1 c6fe767be34ce38e7ea1de2d5bc4be868a739cc4
- SHA512 df81ec3d94c91746a03429c5a41fc9eb39be4cc628e1f931adf28e10f5f2dcc462c8c2929d1564203c3d399c75f422570c96f818f70565699a8678d42af95222
- TLSH T115716CA4E566F51500984FC4CD1B518EF23A4C9C7BE03AD1440F68F7B69C2698295BF3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawc393faf7-d729-4519-ba9f-9c2d11d50393.tmp
- Size 1KB
- SHA256 3a5d8ba455313510ec454e0b03c9310fea05599c856908bef47ea0efbfbaa0ef
- MD5 f7ab3856c1e17d356b9f249f042ab17e
- SHA1 1ee231214ad272297d80adb4d73aca77f2ba5fb5
- SHA512 92df2152e6c74ecf87512f2a2ab920bd9b6d5a8eab04782b5815e7402da7b8d9a6773e38e9f12907199851ba5e242f0b3447c48cfb3b96de89279811ba7934b9
- TLSH T1D411B54B9AA7C68CEC6B97F98ED8BFE881F006B103D00956A5287F0640B9744E74088C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawce2b4d5f-c51e-45cf-8f75-191ef2d62170.tmp
- Size 9KB
- SHA256 91dc8adbfc4e479909beffc408c698a79c8dfe1773b2efdec84529b59cb6bd5a
- MD5 6c17a2677cc56d9f35c6163873aea5ee
- SHA1 e23617668a465ff5d8ec91e059d56ddd52edef93
- SHA512 1b12f11a88cdc6396b3815101894f98617c2a8a6928580600947b1fb0a0c174ee855fb9620110ff108b80504112b930843c0d459cb725b53cc32ed694c29660f
- SSDEEP 192:/W3uYPC3gnZ+k90MbdRsyW/02oJosLhBC2BHQHCdtNaJW1Q:/SPC3gZ+k90MhR082o3hBxHVdrR1Q
- TLSH T10822C052B82345626C867CFCB32A938DD3D2E1F63E4C54E911101BE554B580ED52BBCF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawd1e32b34-0eca-4f3d-8720-b01f38f7b6fd.tmp
- Size 1KB
- SHA256 c72714b247503a1bfd9bbe68b0cc6458204cd1dd7bbcbf31c9b8a74d2ac1f804
- MD5 b87208d5018c11b56682d237f71a3c28
- SHA1 80e1b94b5e6e1b084d0d86180b2a61969ba7619b
- SHA512 91eabdfe696b1500060f5f2350f961be3cae03a9d8a95e7d1a9ffc954e53b5c57fe9b7e3ddd6464f95716420020a100bc23fee4bd8ec7a6f2e41be123fdf8845
- TLSH T1D541E8805D92BF21CB0A16A9DC806AD7903AC9D22856DC281BA612C5A448EE75A90BB6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawd6a4668a-a5ca-4341-be2d-cf626e702da8.tmp
- Size 10KB
- SHA256 0d18bb0383db6db0efc26b496bb6f9aa4060131407c7f6346ea4a31bac6770c2
- MD5 d5f2f9cd9870db9176b50ff4ae01fed7
- SHA1 77ee5b34795baeaa14161a9e1e91c003d0e7eb14
- SHA512 2e4bf04ece39add90293671d0cfd4d3282c44acd905039c609e0d54496329d92f07047cbc837c064b0755cf22a3cffa2d8632d0e60f493342dca0e2461f9a097
- SSDEEP 192:SCZlx94hxfuhsnqzsq3ZF9+0MMNT4xG2WCzNtJthZHm6NqhLl8E:JZh4Hosqzs4F9+0HSMCzDJ3ldwh
- TLSH T11122BFA20CADEE221DC35DF195372E256A05D080172574BA1F3336D37A68EA7D8CC247
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawd7cbbfb6-353e-4cba-90f2-1636a8db971b.tmp
- Size 2KB
- SHA256 5a7ad4c7363fe58a5c2d1f3522a976a8a1a6b6d652d01da62562e293fabc2e26
- MD5 d0763e2948e673d558349e605da3f04b
- SHA1 75a578ce15903e74bf5739880096d02cf1fe2a88
- SHA512 85455a81a88bcbfe24b17b3321df80caa86292ec0281ca9b95a675203ddace007e6a8cf593431d3e038861f0b69cf3ffade2b98bd142be4a5e9dfbf6bfa708e7
- TLSH T1D1513BDB53C9F5122EC0D0E45A092A3FA924CD3DAB219C5B52039B806B0D52641DF017
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawdaab8cf5-0972-4ffd-ac19-2da0ee8ee5cc.tmp
- Size 2KB
- SHA256 37461ce37c7bb795afa611fbc193e6314b2aff677a234faeacfcf3243e1787ae
- MD5 4ec957d16b29e09bd9fcf787aa35ed3c
- SHA1 9942e102edd7dd60602df251c8fe386850f3dd46
- SHA512 12bf5f28a045923a04be7342307ff21170ff3dbade8c4aeac9d42531c9a1b8f33adf8110373cd3376b86a5cec41434f573c6ec47d1d4550b0ad157d193b45a78
- TLSH T18641E8B720364B168AFAD98131EEFC664985A22311679524981726F5C39BB57D00FBF0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawdff16fe8-d069-446b-838a-5131b8c4db36.tmp
- Size 10KB
- SHA256 959411b8d518a61965f525557f300bd747f4cbc91c66ded53a89ee97048e53d0
- MD5 007259a94ef0aaa5308250b0e230450e
- SHA1 03d5c1c2bfabda3fc930834ae351591582fb9fa0
- SHA512 4a9ca8b7dbe17f962778c430fb44c869ef29a133fde663d75a1994b6c23e464c7116ff949779302ba059a0fb2dbf5c02c72411dfaa42625508818fa9eab9176e
- SSDEEP 192:QDQiclY/oEsesEzDmnXMH/F4rPsxauiY0Xup/f44hlA5weZPN+QerIfd9naIU5Ja:QDQicCzQj7sxsYce4qOTZPN+QeMfzU4p
- TLSH T11C22BFA67378937C470137F868C38954B86849337BA46FC66536CA9E33D3C0196E50C9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawe2793625-db87-4f55-b5b5-9b91237985f0.tmp
- Size 9KB
- SHA256 923f39f69ef8078c8e5bfe4647617d1551a306e2fdad857791103b7842de5dfe
- MD5 a10bf192bc7fe61e47a513b6a79eb069
- SHA1 a22484ac4d2a7a91bb5a55be278483f050e9240b
- SHA512 91cc9cd1ebce9fcfe0f06a4c11d6806c7e179eea9b523e69e3145ecb609ef91a327fdb7356860c3e9eabf14b406a7f04d5a4644c38a06e1da6fc17ecd2a55b5a
- SSDEEP 192:ZrSrOS1BYtv0+cCtMiNLpMSp7Iu8+PuXV77MFvoHYX7kU2rGO:WktvMCtME1MSpWcuXNMlXQU2KO
- TLSH T1AA22BF287EA0F44771837D56BED19D741A472451042C29243E4903D71EB8B6BFB37D29
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawe4a2a158-53c9-4120-80ff-3b3191cfbff6.tmp
- Size 11KB
- SHA256 4944d846c66a8df01b4e246bd6047f77ab89fbd09c6f42f30a802022c3997a64
- MD5 5bad117d51a02144cfbcb18152435999
- SHA1 181378dd293440a3b3710fa242d44a376ea750cd
- SHA512 d62bf76f55899d099d45391094b082f7035f49c8325f21d2b9f832f4b4e195e7e82f1eb87ccbea1e42ad63bb960f1db41b67c9f6a7a2592459161a79412c4016
- SSDEEP 192:1SZIShcsO2BNIm49E2IX7VhMjnrR2skY2vTV6z7fNnOAQy+DaJxYJj+:1SZrhICN9qE2IXrwtxuvTIJnOJy+DYxh
- TLSH T1D532D0D71ABD0889432B8F54A5113FB0BB094758E210C3EB84DB302EADBF92427ED361
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawe99054be-3635-477a-a2ac-1df13091787f.tmp
- Size 2KB
- SHA256 c5c1e6a1b7d178000aaba4fb068c0355899dc15b62c367c48f8ebc74ea68b129
- MD5 c9e2daaedf1346605d3b3a7407c622d6
- SHA1 43fd1d8c53f9ec902c492f8c6cf102e366143968
- SHA512 45ee0bf03e27bcbd9773cba4dac9d7f4605a73ac36abc988b63801f5d553499652ba339ed4bafd5ea6c70017e0faed1f52b4774cfad12cb9cf54374640be7277
- TLSH T130516E4DC077D80158D4382438531E5F1FE9355FDCA326B6D8E80B3AB270C33859058B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawec87b133-3b15-4c74-8869-d2e51858e9b1.tmp
- Size 2KB
- SHA256 15a02cb87b85b366fabbc4a6fc8c5b95c9259f38fa5c72922c2958579ae58cf7
- MD5 bf32d137a899c9a6a3d9515200732f7d
- SHA1 41a79e63760f1eb8a48b4fbca153eab6d88e09f7
- SHA512 346f8474548bd910c7b311492b02f94af29b22558992421b821edbed232d3240a547f0d4b4afe203ddeea00e7c81349d047b8e200b030f236e72ae406c314306
- TLSH T1E65119198263C08647113BD9AE872A27ACA22EC580AF198FF968FECACF417744F16405
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawf16c6bb5-7243-4dcb-8902-e45ced3dbd94.tmp
- Size 2KB
- SHA256 43e0984a76b28288bcff1c01b25f2b38c54e56b366809ad9c9270a0fc3bbd1d3
- MD5 ca2cc5cbc5fc60ff8599c5240b967f30
- SHA1 3b66ead582c7535e0cd25dce445d4b7d4a107cab
- SHA512 8eaf5b71fc3d6af4764de8bb936764e7c6b9c4ade62bf4b0311c9ea96a5f72801adf75718fb7fa3ff0f678229227e83c0c3d4043db1e315fb6d9507de1cbcfee
- TLSH T141413A5A582FF1AF6C7D03E60C475014C5C9369A56EED808BE18D040460B3C9EBBEAD2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawfdcef3a4-5645-49d6-83cf-eeec87748671.tmp
- Size 11KB
- SHA256 13134c98bb965f1fa75bf55944f599624890665074632685773d26c0bade1d7b
- MD5 e39c5fe643bb4049cfaa12d4a08fecee
- SHA1 c05fa5641ba1486e90c72ab6b428af59c9d80796
- SHA512 e2dfa51398a94dfa7294d4bd7af7f7615e70869c888134e69008fb0caad53dbdc437e632572c8c393f740c348568c8b4880e0b58c8d12c0e5fab6663d8f1b52f
- SSDEEP 192:FQ0ZaAhgZNjgsbjv+/mAfgQ63Ua0UGVixUwHAK9D5U4VPME4GHOzbebZ8mAKYvmd:F/aA0ImfDU/NODH+4VUyHOPnm1Vgco12
- TLSH T16632BF2D531A82C70D5BE5CCB3D166B10CBC0E24B2426623DF6ED2D8B17CA675CA57E2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawff7a521e-cc08-4e74-8a7d-5b1a8ca4cd99.tmp
- Size 9KB
- SHA256 57b7b4aceac801d05057f580521b308c30f8afc7e50f242dd095b97a67b7d667
- MD5 530293d575c7084a8a7e643c7f9135e6
- SHA1 b5020e9ed6e5dddb85d711242e4b81dcacba4116
- SHA512 497f3e36c28b1ba7fdd226bb7fa99fe7bee92f59f738268e20376cb59338575d3d9126c4aee6238ac602e091d9ff7765f769887093b1362b5625f0d695e146fd
- SSDEEP 192:17ke88zKInNkJogewwVTMWgqwtYO3vAj/19J6adMWjQy4FeBW9:Se88zKB1mTFZeA41WDdBW9
- TLSH T10B22CF4A07B33B366113A0C9C9A1C831EDCFB00C3DE53923960BDDA3C6BE8161AF1526
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\daily_wallpapers.json
- Size 4KB
- SHA256 7fdd2937785f48c5518e4cccf5027096f1378046a5cb4e7443819cd6bd2f398b
- MD5 8d7dac9c74c7237572b609e9e1aa34f5
- SHA1 afd70ab0bc706289d321098b1e31289aa798d660
- SHA512 dc7a25129e867a85a1d2094860686352a70cb28a8347b2c06c31b9e259abd34d38e65d5818da5ca38e1ac303db1221366d204b6bd249a4b6d687127ca9b29011
- SSDEEP 96:y9L59LqE9LF89La9LbImU+5ULFUtrFUKewUhGTtUqqVUO:N+QCVeyTMl
- TLSH T19B91ED769BBD8C3AE62933901961FD82479E71B3D7A81C7873C94F4241F88B80A32657
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\spotlight_campaigns.json
- Size 600B
- SHA256 df3e30f0f72d9b4fd19e045b7b102386b0f8fcdcb1a54387e5adb572d9ebcdb7
- MD5 1d9022daea97a519d8f66c40a5ab255b
- SHA1 0bfb9d20c56c4bb325eddaf63090d94c404749b8
- SHA512 4f38ec491fad3c602538b8ee6549a2e5df67d9c3d7cb9f670e366698cea3e00e99c2bf6c24eac6713d45e6ef42b678ed667dcc53e41bf5b715822acf7fe3ea67
- TLSH T114F02D7A0A22442672D860663786385F0D884D0625C7E2CC5EAFBFE683B05E324962CB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624
- Size 413B
- SHA256 bbf8abf4b4e09206cc829d83c0249a49f0853e1d2efe89529d57c2f005e7ea5f
- MD5 26f0a108ece59d1950f335238636a747
- SHA1 68bf62730384b6542be6f296a90fc65cfd33858f
- SHA512 47f5f8add679c8209906a6d683be10b960a9f37cf5db76bf38f2a897f122b23ac2950ce91a8f5ed522336be66d37be6427aaef095463a5a75b57e53bca94a730
- TLSH T161E0A305FC78661AA95457F136B83991F7654884A4915AD78DEE504C431E30D0519320
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.185875162403affedf-f132-4ab7-96e0-8cc451ecd4ca.tmp
- Size 1KB
- SHA256 eeb7c14af07209780320af49410ce0cf2af3120f6bde1060194878f789e7d389
- MD5 7983e98cbb1b49da1d04f50068ebbad1
- SHA1 132cc6e820f53ecdba97ed9cbe13544a44c9c01f
- SHA512 766eb4f176d25cab061e9d6ec2baf03d7e1fcfd00c87cbb4200551fffdd006f71e1c6176e4c8a294076ccdc5566d45ef0cac7427359ddaa33c73de1ac9706d4c
- TLSH T1D121D2EB652147218E4DD3D73B3C7998C7B3CCC6788098DADA9C649C034A37E68153D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.18587516240611c3d7-53a3-4ed6-b59e-3b64d284a42e.tmp
- Size 3KB
- SHA256 623781a5fb0ced63087bc7d6eeed09e4e8e961aefb784888675df562bdf49343
- MD5 96a7e3ba0cd56d7e84869c3109f15025
- SHA1 c903a6ea0a181c492259180e6cafc94b33f6ad45
- SHA512 298f47a77605ab9015dc0b2a71527a77d2ba0ea077b0c4512a1f7a062301765aa3d9b18ebd50aa1dfa058be378b46a772929e36c924fece829536221b2b04561
- TLSH T19B7164965A116A329F5FC35FF6747F1ACF7AC482700165EAA6DE004D1BDE6BA4403343
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.18587516240864e024-4f0b-4bb9-bcc5-bc2ee38bf566.tmp
- Size 1KB
- SHA256 38d1e0ea9104fd4836da89579f229c6501e65512f8bf568e2cf6c47feb40ea9b
- MD5 30d9814ca21e64a44be8cdb25fe6198a
- SHA1 ff614e60d41bae36aeac47040eb5e4b3b9b60204
- SHA512 fa23f30a3ccc0d07aa6893fe47bca4c106c3cee9f14cf43098538e6b73c545337d5cdeca2ddd7c714873af68a6be6d3eabc154d414b71f038f980a9c25a52184
- TLSH T1D43132EB656157218E4DD3D67F3C7998C7738CC2B48058E6EA9C649C038E3BE5805390
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.18587516240d71e739-d21a-4a0a-b894-8cd710a2d146.tmp
- Size 591B
- SHA256 10a835e98dc9f1f7576e1755d0fa5c42e0ba07c39da014dad6d1e54b95b7b3f8
- MD5 22ce0353a0b62697864ef5771d8fe482
- SHA1 622be75d8df7b50427d9f2b81fa7f1d6005038f9
- SHA512 15ebbac60000b0c2a2a5b1d013d946ee01ba20da853efcc72e7b11dc7e2444f70174251abc5f44b3bd9f96a097f268062db8e7f615110bb6f5c72dd7f58ef260
- TLSH T1C0F0478B38392316DE088BE2377871C8C7A34CC0689008F7D6DCA48C020D31F5514390
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.185875162439c9e518-9381-46b4-a224-f9205e9ed006.tmp
- Size 505B
- SHA256 05b7fa08cf3a73fe01bf455a336576e37a0ed6fb0d9d8c742b8c273205581eea
- MD5 c5da7dcba078697ba3f8aa4317d1760a
- SHA1 6ad78b72739aaee379c3cb4f29755d3034394e20
- SHA512 6c768e77e201a09f9c866532b06907342d1f233ba27a735ec52421a6ee4e9b479e036f4c5b87b8a81e344783de1b6246b9d510b552fbeb5e1f6ad9daaf8f4668
- TLSH T151F00E4A7C796726AE4887F637B83584E7A24C8168A459E7C9D9A04C430A31E9A2D390
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.185875162440da3665-1e29-4a29-a6bf-57784ddbd35c.tmp
- Size 1KB
- SHA256 5a87889a6d24dc8120601e4a9cd3f34f2df6834635523260c4a053c82f3a1666
- MD5 336cbf8a73777d33fef6f93673164e0c
- SHA1 02ebcfa41337f21763f7988981ecd490b8e2dbf6
- SHA512 7ee29a1db97ae717df0d1e718503f98220a1227c4fa28f91558a1d861753880d44573856c329119cc7203fb33260798ecefcc024dfd295295628322e42dbd6d9
- TLSH T1AE21EEEB653017128E4DC3977B7C7598C7B3CCC6748088EADA9CA49C039E36E68113D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624410edf81-1af4-4bad-9168-8a62ab8b2a72.tmp
- Size 3KB
- SHA256 21cb92f2cc320fe168091cb448618304a285b20c1089d3c9901ce563db3d211c
- MD5 ba6dc93ef6ce6f88303fd52e8326ebb0
- SHA1 916732d59cc6ebe06f0a60462e485d4a9082d671
- SHA512 c376f88f273ff1af7bd505c9dadf2d0ac9ae6e597f52b97b2a87575a825d8e2a5c19f7f686bd11c754d8cf156bfd6401d4c0f9cb260e4f4efc64eb1be0e72c00
- TLSH T1A671669656216A329F9FC35FB6747F1A8F7AC483700064EAB6CE004E1B9E6FA4417343
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.185875162449e4fca5-664c-4e58-817c-c9569b0cacce.tmp
- Size 1KB
- SHA256 1c1ae5aef8e56ff46085ea0c4e146aa12180b0bfbf791800b88ccb31536f31d8
- MD5 529fce85a97227f48d6987bd432b61a2
- SHA1 30705fd7ec48026dcfbb61a8bfaca1b037238f55
- SHA512 6262b7a1947c80a89a5cf7cd849bc7ec24bf03d87d92d211b0526e3aafc8c1aa425c2435df96d7286e44405d11703cd3eac813911d1a2a76e1dd054aba8e896b
- TLSH T1DD111FEA693117128E5EC3D77B3C75A8C763D8C1B48084E6DF9D648C038E3AE68153C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.185875162469cb22d0-f23f-43c8-864d-3630b6e9451b.tmp
- Size 3KB
- SHA256 ec77b48f35d96ae33b4691bdeb380537bfd72302a843a45b4ff77ea50236e07b
- MD5 0d91e3d008aa3285d7761b6bebca9edb
- SHA1 2689d9e2c0e12623be618f1a2087bf924e06ef3d
- SHA512 de81bb98f01d673c29f66f726af5803df5674d488c49004cc83f35a2c341a3bb4d848f736c9ea382a3fc5ce78c4a9ab86d6de14b652c29011c74deb6ed0c6e11
- TLSH T1E07152965A216A329F5FC35FF6747F1A8F7AC483700064EAB6CE404E1A9E6BA4407343
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.18587516246d55b841-a2a7-48ba-adde-c51a61cf23a9.tmp
- Size 2KB
- SHA256 c6c3d97d35e1068e9d231eeb16c6d142c30fb336ad604cf1712033cf0c029150
- MD5 90dd8faa70bf56f0d967a458641b239c
- SHA1 3c062280e917f234f7ef8fde12e0b8fc6ee1ce07
- SHA512 96cca7a57b6dd2251805f6e43c0f9a7215b02e51cf824b40b852dfd1b8134c4e00b6a7d2270dee7cac9e63de5fc6bb1aeabcbe72fc3fcb95e12e6c24f7917c23
- TLSH T1D44152E6662057325F5EC39AB678795AC777C8C2704054EBA6CD408D078E77D5406390
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.185875162477483f85-18ae-484e-b8fb-b60da06e0e44.tmp
- Size 863B
- SHA256 8ca7757a83ede9eb5765d2985b301f1c2e50589f7ed13bf5398181188d69cdf1
- MD5 ef37cbae5599539c0668ab107d3e6d51
- SHA1 31a7bd7c052661c87e31e9a738003ff0e20167ae
- SHA512 bfec1c360c062078c8d1f899006c4627a84af7406a9d1143799e7d584c15a43fd167c0b7f3bbfdbeacd4bbdd9521ee3927cba98f404ae80019340dc6e3eb5f7e
- TLSH T18F1112EA693517158E09D3DB3B78B59CC7B38CC5A4D055EADBDCA49C038E36E58153C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624938b3590-fb64-41e4-bd6d-095a9100477d.tmp
- Size 680B
- SHA256 c7de418720151aed2fdb86a4a81c33870fd58ada899fa4473db20b87d464ac3d
- MD5 5e1b2fb98133e9259ce9b48a35a51a37
- SHA1 0e78fb19d6c215cf79f411c24b52dfe058d4a470
- SHA512 3f160a539c8c7319de24ff8400f6deddfee95f23178d124fb60d5379c50b78497a794b68c379852bae59fd0f665266ecee806205efe96b320fcdbd6f93641d28
- TLSH T1BC01F4DA793467119E49C7E236387198C7B38CC5A89044E6DFCCA44C035E31E5415390
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624a026a292-1428-42ce-88b6-0cdbfec8a93e.tmp
- Size 771B
- SHA256 ce075b107a0acced025026eb42511edfe8fff8e5adbf33061915c36718e98d97
- MD5 93c4fd582daa120f8b9d7c570eef15d2
- SHA1 66ae899d39c5bc3cfb986ef72aeb77c983044f1d
- SHA512 b42377c5b49f2e0862af0d232239789f3546e5f4b6f39dfcb84e1445713aca1bcd4f880a17a98b0d2b843b2565926b0a892e97f1134335cc05a914228682e7f5
- TLSH T1AF01FDDA687617158E09C3A23B787088C7A288C1A8C094EADBACA48C035F32EA815380
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624b3c5c120-c064-4c4a-a621-03f9bbce04b2.tmp
- Size 3KB
- SHA256 0fe4c14060e2c916a66ec86df78cb7b5d2d3e0f58ddad62c3e6a1429192beca6
- MD5 9a18ca1a624b4f1842faee0a9c221bac
- SHA1 833db24b9a3abc3e008a2b515981448fc54fa5bf
- SHA512 618d1c6e60727faa2e7f0f56dd2bee781795be488bf9f763be0ffd2a9d06f009e6d31ba6e2c0c12bc6638c4944a82b8a412f1061289d0fb7395e51128cb702eb
- TLSH T1E761329A562056369F5AC35FB6747F1A8F7AC8C7700064EAA6CE008D1BDE6BE4417343
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624ba4fcdf2-31f0-496a-9b44-1310e785fc78.tmp
- Size 1KB
- SHA256 256788bd43228b74bd0da93fa2d2c8117169aab673c6f51e5f3a59f1e907d26d
- MD5 74f79480761dffa1db41dd2e29688f51
- SHA1 7294daacc84d5806d176ab8e28c7bd87849dce62
- SHA512 95437ec7e5d75c2bdffa511e14f0b63ac489c7f6005d57a57f4ea72b5dff9c260ce2ed290514062eb2bb98c5e7e91224cf5165b81c65ce838568891e6ed1958a
- TLSH T17821DFEB652147128E4DC3D67B3CB998C7B38CC6B88058E6DB8C609C039A37E58153D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624cac8c536-3d66-452b-8f6c-aa5efa84550b.tmp
- Size 3KB
- SHA256 9aa97890a4e7ebb67f767cc695783592a3c1847a4da42874eca8757ecb9b1414
- MD5 638ff049cf4dbc304d28645466c9c4ba
- SHA1 636214fcbd84e6f4ee61fd9c17adc180a1b1e8e3
- SHA512 e7f59ec38d00431b994b8f9a655ce91725aae479395508e974b0ae1c9e3651c947f28ad8d14ec70d38eb823e38377a1985031f5941010bfe2192266d46c6ff66
- TLSH T1B87153955A116A329F9FC35FFA747F16CB7AC483700161EAA6DE004D1ADE6FA4407343
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624d49080f6-c165-46ea-8ce7-c8ec091cdf24.tmp
- Size 1KB
- SHA256 c0b28ce672d5d92079e699845612fb40657c594db62e349c719ba8ef0d4912ac
- MD5 39ba6dfc6428d9fcdca75b751993e222
- SHA1 071f8adf25405c38d4c293f0e48f253cdf68e7a4
- SHA512 371710535e2e9047ffce90d6f92c4e39561c02065e6ad29d82cda52675ec29b4f0889e194d4d392f9b640fa36bf503844f5125ca1017dee850254b0d23390cc8
- TLSH T18C3120EB652157218E8DD39A7B3C7AACC7738CC2B48058E6EB8C609D03DA37D5815390
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624d6e38480-ef70-49e4-a2c3-d5762b718b86.tmp
- Size 3KB
- SHA256 80179096a96fcff765c7d134015f0b2da180039ee0756256e01b1ba277fbb0d1
- MD5 ddcc8185339d9c436cfd903d2dd90f7f
- SHA1 d330e605291a316accc0fc263923580dcc7183a0
- SHA512 976b8f3e2c6aad3834df8853bc5936b870b76d3c388a675d747515b32b4aca846dc2f84c299a2d2728e8c245a39ee1fdcad068f8406d2fc68b55620f85123de6
- TLSH T16D7163965A116A329F5FC35FFA747F1ACF7AC483300160EAA6DE404D1B9E6BA4407343
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624e0bb77f4-330f-4e08-accb-6aa0e311fad7.tmp
- Size 1KB
- SHA256 209d021b50fcc814b5296f2e327fe4efdd847f9b0a247f045316a8e111e7502b
- MD5 c8fa31e562ab16aaa8d69fb8e63af5b7
- SHA1 53ec8f44c4a3ed69bac0e263e5f5402f952b69ea
- SHA512 de46de890670f4d7041715432a5eb4587567bfdd828edd610228c5bddbdf856be1717edcf26215675e663421ecec77e9368e4e55398e631b7973734eee27d483
- TLSH T19521E1EB653147228E4DC3967B3C7998C7B3CCC6B48058DADB9D649C478A27E58113D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624ec091d77-a786-49ea-ae96-0829e72afd7d.tmp
- Size 953B
- SHA256 fa951ec107f046968fbc048f0fce882767d4ce7ec2506f81b7b271f676d3515e
- MD5 09735d094ca0e6b29aadc92f70099c9b
- SHA1 2acae05dd5a59f6099ce9f572cb7fa24fb4f41f4
- SHA512 15a434b17256825f32fafbbe30d3ae4a5872d725ecb5cc8af9efc07f4962a5dba5cf11998ede47adf74129270ae45de68dc2f0c6e0396c8139cd355108d960a1
- TLSH T13E1110EA693117118E4DC3E73F787898CBB398C5A58084E6DB9CA89C039A36E58153C4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624ed9aa7c1-d6ec-4c3e-afdc-31b12f1e9c41.tmp
- Size 3KB
- SHA256 b0ed0f4d55d93791b89469eb14ffd52dd82f16b5b54fe03e0f14464e269c89cf
- MD5 c2f913ad85754324bfdc35f6f2aecb7c
- SHA1 503bf395c456ddabb3045d46c4fb83d8e83fc694
- SHA512 863b0b1df24a89deccb2869b42b120a06935ff836c685743aacd841888a4f49f215de4e6a88bf3b7d9704a55fd5664a590f879f5cc2ac5dafbc7d32f3c33ddb6
- TLSH T1D171449656216A329F5FC35FB6747F1A8F7AC482700065EAA6CE404E1B9E6BA4407343
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624fce8b4f9-d2c3-4eed-b5b0-de4f53d57718.tmp
- Size 3KB
- SHA256 5d085abc391f866bae89768c8e137344e52e2b82053f4ea0b33f3c5eb04197ea
- MD5 51f394741a0195f36caf967769c3c99b
- SHA1 3325e0019bad78c454d330e07c21793a25573368
- SHA512 3340f6e47ae7d7df372ef2420031533a5be9eef68767e8f446a7b2b675b1ebd45f0e811568e41e7b42b4554d47ba1f68171e969f9be413503dde18b37eda1de5
- TLSH T15E7153965A116B329F5FC35FFA747F1ACB7AC4C2701064EAA6DE004D16DE6BA4403343
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.1.12596648
- Size 171B
- SHA256 d91b4c76583eadef3963f850c8f7f8581080a77caa18fc8d3721cc4c6b94ee89
- MD5 b10f5d41bb0a9d8191525663fd7a1901
- SHA1 3c4d8147e02847ea131497a1ff311d6558f3739a
- SHA512 0ed5f29de8bbf48167c49b90dc27d94002f8e99f711a9a04c7ea52da3d0501b65bca229a3581d4da375bd95f166d06e5f2e2aa61dd76b0a04c50d527c0c0190b
- TLSH T114C08CA570532F4A8C9D38AEF05939E23CAE09420818A411119D6ADD103BDBAB2AE630
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.1.125966480006d175-170a-4859-8efa-8ba03f5500a7.tmp
- Size 224B
- SHA256 0fb3cd22f64d256fa5c17402292bf5a890a6abf3874239074ed92cddf79b2cdd
- MD5 9ec787f3af1847729c9e12d87cbc4bed
- SHA1 2fd0ef034a02b90a0943beea2c0f95d4be6978fe
- SHA512 74dc355fa7e3375e6024dc656ae9e66c28a8c788700e40958072b125de6db5a75144ecfcf6f120b4ded2c009c038bf251ff2759afe167b171d0d9413cc5fdbb7
- TLSH T148D0A76070956D4A9C5D6D7AE0B877729CF904420801966541FA11A812578EA210DA30
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.1.12596648485a0da9-5ca9-4bc6-95e2-5a3a59884dbd.tmp
- Size 224B
- SHA256 e77fd59df66140d063ffb5abc4a689edbf7c010b78ac1caa5fc16b3c3b2315f5
- MD5 068f050a62dc2f8c71fc2bfa51569a92
- SHA1 6a3fb07acab40861b7bfeeed72f929f69dc5a4fe
- SHA512 785baa1142b2da54c9871c54da8d373bb717e420788721d6618881bbc39a34209d9c0ce7e88ab3cf9290efdef8d61265789031d4fcc5d1fdff906e980a6f4c11
- TLSH T1AFD0237175D11D17DC9D1D7DF1FC3B737D6904D11402967413ED53D911538E66215930
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.1.125966485d30736c-9e82-4576-9ea6-d302d1f4584e.tmp
- Size 200B
- SHA256 1be1e5ce1fd29d048a8e2e21aeef4e5ea6630962abd7bfdcbe6b15b37b84fb82
- MD5 ea3ad4c025903f38c79df0859c3daa02
- SHA1 27489c857188d68d2e26f6e766265dabe3c9b600
- SHA512 5c036b238d16e2f54a0d1b10ab6a8458cb45a7cf4b7b0231ce5a5da6c643089405919996f74aabd18c8e8b6aee8c82538d65be10d016171cbce1b99c443efbb4
- TLSH T104D022B0B0811E198C2B2879F048ABA028AA40920604196095D9529C04BA0B6B12AA20
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.1.12596648ec4c9819-8a9e-4d25-b2e7-f4cef57c06cc.tmp
- Size 224B
- SHA256 d2a5b4cf4dbe00baa5082ac573dc0a37d6510519aaec90e8487212dfac8f45d4
- MD5 e1e184ec2cbb59965fcb2c95f2a75306
- SHA1 b6540a8a55d4a29bef428a85f8c3f531a1377d67
- SHA512 36a3de3a9c7824ed6baee725c72bca9794ea3e26857fdf8e99a8358adc13b528fb4dc6e63955ccc09a8d0fea80d5a4675a112daadf40afd10daefcb1458087d0
- TLSH T1A0D023F071851D1DDC5D6976F0982F52597E44520D04517003DC11C8112286F111B934
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\VariationsSafeSeedV257cebc62-b905-4835-86a6-1be3000292e9.tmp
- Size 19B
- SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
- MD5 0ba451e89bf7a6a0144344570515f79f
- SHA1 76f1bb126b80b61ff6022a5691f39d75f42487c7
- SHA512 3a0527494b10bdb2aec6280cdcecfe86dacbf02dd55cc8f6a1e0fa981327617a6fcf2543bd9788e7aa866fa397f57bbc1fbcf0d2f6aaa74a35c4d06970afa75f
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\VariationsSeedV26e9e5dcc-c337-4bc5-b323-2a1e159bd13e.tmp
- Size 11B
- SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
- MD5 78bb337b5e38a8a32331f18d8a2d3cda
- SHA1 ad1ea4656ba8fcc889aaca9a88bd975de1e2beb3
- SHA512 ec661136e4830c211c0eb418623f224423b681107cecefd18792799c25969688dc8585aa56f794bec55847fa47925c025f26e56c276228c20aecdd7b55b12710
- MD5 SHA1 SHA512