Analysis

  • user interaction
    yes
  • max time kernel
    44s
  • max time network
    63s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260911-en
  • resource tags

    arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    10/11/2026, 12:30

General

  • Target
    OperaGXSetup.exe
  • Size 4.0MB
  • Sample261110-ppvxvsay3x
  • SHA256 fac51bc65fd910451673a76dca3bd78245bb055f4db01fe5d978761ed480f083
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 10 IoCs
  • Loads dropped DLL 4 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Writes a Windows system DLL name to a user directory 2 TTPs 1 IoCs

    A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 8 IoCs
  • Modifies registry class 45 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 10 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaGXSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaGXSetup.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4128
    • C:\Users\Admin\AppData\Local\Temp\7zS020925C8\installer.exe
      C:\Users\Admin\AppData\Local\Temp\7zS020925C8\installer.exe --server-tracking-blob=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
      2⤵
      • Executes dropped EXE
      • Enumerates connected drives
      • Reads the TCP/IP host and domain name from the registry
      • Enumerates system info in registry
      • Modifies system certificate store
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4048
      • C:\Users\Admin\AppData\Local\Temp\7zS020925C8\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS020925C8\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x290,0x294,0x298,0x270,0x29c,0x7ff7d1c75258,0x7ff7d1c75268,0x7ff7d1c75278
        3⤵
        • Executes dropped EXE
        PID:1176
      • C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\installer.exe" --version
        3⤵
        • Executes dropped EXE
        PID:3580
      • C:\Users\Admin\AppData\Local\Temp\7zS020925C8\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\7zS020925C8\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=4048 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_20261110123208" --session-guid=42a161f8-0839-4d3b-8ae6-ece3caed95a0 --server-tracking-blob=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 --desktopshortcut=1 --wait-for-package --initial-proc-handle=5809000000000000
        3⤵
        • Executes dropped EXE
        • Enumerates connected drives
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:2044
        • C:\Users\Admin\AppData\Local\Temp\7zS020925C8\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS020925C8\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x280,0x284,0x288,0x25c,0x28c,0x7ff7d1c75258,0x7ff7d1c75268,0x7ff7d1c75278
          4⤵
          • Executes dropped EXE
          PID:4856
        • C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\installer.exe
          "C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\installer.exe" --backend --initial-pid=4048 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081" --session-guid=42a161f8-0839-4d3b-8ae6-ece3caed95a0 --server-tracking-blob=ZTdkZWQ1OTMwZmE0M2RjZDQ5M2JiNTQyZDg2MjhjZjFjYjFhOGI4Y2VlNzIxYmVmMWVkOTcwMzY2ZGQzZWE3Yzp7ImNvdW50cnkiOiJVUyIsImZhc3Rfb25ib2FyZGluZyI6e30sImh0dHBfcmVmZXJyZXIiOiJodHRwczovL3d3dy5vcGVyYS5jb20vIiwiaW5zdGFsbGVyX25hbWUiOiJPcGVyYUdYU2V0dXAuZXhlIiwicHJvZHVjdCI6eyJuYW1lIjoib3BlcmFfZ3gifSwicXVlcnkiOiIvb3BlcmFfZ3gvc3RhYmxlL3dpbmRvd3M/dXRtX3NvdXJjZT1nb29nbGUmdXRtX21lZGl1bT1wYSZ1dG1fY2FtcGFpZ249T0dYX0NBX1NlYXJjaF9FTl9UMV9CcmFuZF9WMiZ1dG1fY29udGVudD02MzQyNTk3MTM4NjkmdXRtX2lkPUNqMEtDUWlBbnN2WEJoQ3FBUklzQUhLZ0dOYktoWlRtVndDUzB1LVNTYjJSSmJMUEVfSFlqYjdsZGhnSTM1bldDcGpfTUlNX1NVVS1Eem9hQW1VT0VBTHdfd2NCJmh0dHBfcmVmZXJyZXI9aHR0cHMlM0ElMkYlMkZ3d3cub3BlcmEuY29tJTJGZ3glMkZneC1icm93c2VyJTNGdXRtX2lkJTNEQ2owS0NRaUFuc3ZYQmhDcUFSSXNBSEtnR05iS2haVG1Wd0NTMHUtU1NiMlJKYkxQRV9IWWpiN2xkaGdJMzVuV0Nwal9NSU1fU1VVLUR6b2FBbVVPRUFMd193Y0IlMjZ1dG1fbWVkaXVtJTNEcGElMjZ1dG1fc291cmNlJTNEZ29vZ2xlJTI2dXRtX2NhbXBhaWduJTNET0dYX0NBX1NlYXJjaF9FTl9UMV9CcmFuZF9WMiUyNnV0bV9jb250ZW50JTNENjM0MjU5NzEzODY5JTI2Z2FkX3NvdXJjZSUzRDElMjZnYWRfY2FtcGFpZ25pZCUzRDE4ODg4MjgxOTY4JTI2Z2JyYWlkJTNEMEFBQUFBbzdQMm82OElWTm5nNlVnZFVTelNwMnpaUy15TSUyNmdjbGlkJTNEQ2owS0NRaUFuc3ZYQmhDcUFSSXNBSEtnR05iS2haVG1Wd0NTMHUtU1NiMlJKYkxQRV9IWWpiN2xkaGdJMzVuV0Nwal9NSU1fU1VVLUR6b2FBbVVPRUFMd193Y0ImdXRtX3NpdGU9b3BlcmFfY29tJnV0bV9sYXN0cGFnZT1vcGVyYS5jb20lMkZneCUyRmd4LWJyb3dzZXImdXRtX2lkPUNqMEtDUWlBbnN2WEJoQ3FBUklzQUhLZ0dOYktoWlRtVndDUzB1LVNTYjJSSmJMUEVfSFlqYjdsZGhnSTM1bldDcGpfTUlNX1NVVS1Eem9hQW1VT0VBTHdfd2NCJmdjbGlkPUNqMEtDUWlBbnN2WEJoQ3FBUklzQUhLZ0dOYktoWlRtVndDUzB1LVNTYjJSSmJMUEVfSFlqYjdsZGhnSTM1bldDcGpfTUlNX1NVVS1Eem9hQW1VT0VBTHdfd2NCJmRsX3Rva2VuPTc2NDI1NTUzIiwic3lzdGVtIjp7InBsYXRmb3JtIjp7ImFyY2giOiJ4ODZfNjQiLCJvcHN5cyI6IldpbmRvd3MiLCJvcHN5cy12ZXJzaW9uIjoiMTEiLCJwYWNrYWdlIjoiRVhFIn19LCJ0aW1lc3RhbXAiOiIxNzk0MzEzNzkyLjUzNDUiLCJ1c2VyYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTU3LjAuMC4wIFNhZmFyaS81MzcuMzYiLCJ1dG0iOnsiY2FtcGFpZ24iOiJPR1hfQ0FfU2VhcmNoX0VOX1QxX0JyYW5kX1YyIiwiY29udGVudCI6IjYzNDI1OTcxMzg2OSIsImlkIjoiQ2owS0NRaUFuc3ZYQmhDcUFSSXNBSEtnR05iS2haVG1Wd0NTMHUtU1NiMlJKYkxQRV9IWWpiN2xkaGdJMzVuV0Nwal9NSU1fU1VVLUR6b2FBbVVPRUFMd193Y0IiLCJsYXN0cGFnZSI6Im9wZXJhLmNvbS9neC9neC1icm93c2VyIiwibWVkaXVtIjoicGEiLCJzaXRlIjoib3BlcmFfY29tIiwic291cmNlIjoiZ29vZ2xlIn0sInV1aWQiOiJkODcyN2FiNC00YjA3LTRhODYtODUyMi05MzE5NmMyOGUwNTgifQ== --desktopshortcut=1 --install-subfolder=139.0.6053.42
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Modifies registry class
          • Suspicious use of WriteProcessMemory
          PID:1048
          • C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff72f2f5258,0x7ff72f2f5268,0x7ff72f2f5278
            5⤵
            • Executes dropped EXE
            PID:3828
          • C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\assistant_installer.exe
            "C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
            5⤵
              PID:1160
              • C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x1237598,0x12375a4,0x12375b0
                6⤵
                  PID:2148
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
                  6⤵
                    PID:2776
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0xba7598,0xba75a4,0xba75b0
                      7⤵
                        PID:5028
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --installer-run
                        7⤵
                          PID:2804
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                            8⤵
                              PID:4632
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x12c,0x130,0x134,0x128,0x138,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a0
                                9⤵
                                  PID:2272
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                8⤵
                                  PID:4884
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x130,0x134,0x138,0x12c,0x13c,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a0
                                    9⤵
                                      PID:2712
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x290,0x294,0x298,0x26c,0x234,0xff5f68,0xff5f74,0xff5f80
                                    8⤵
                                      PID:4132
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                        9⤵
                                          PID:2956
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x12c,0x130,0x134,0x128,0x138,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a0
                                            10⤵
                                              PID:2400
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                            9⤵
                                              PID:588
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x12c,0x130,0x134,0x128,0x138,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a0
                                                10⤵
                                                  PID:3428
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                9⤵
                                                  PID:4932
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x12c,0x130,0x134,0x128,0x138,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a0
                                                    10⤵
                                                      PID:2076
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
                                            5⤵
                                              PID:3708
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x12c,0x130,0x134,0x128,0x138,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a0
                                                6⤵
                                                  PID:1108
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --gpu-recent-crash-count=0 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1644,i,16957352306508495066,14954455450040335481,262144 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1836 /prefetch:2
                                                  6⤵
                                                    PID:3412
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1940,i,4704633523594166019,148732418070909616,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2092 /prefetch:11
                                                    6⤵
                                                    • System Time Discovery
                                                    PID:1444
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1956,i,873657467571073652,3030856191560207966,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2924 /prefetch:13
                                                    6⤵
                                                      PID:2932
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3272,i,15873577247912896251,18065884415790337583,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3400 /prefetch:14
                                                      6⤵
                                                        PID:4284
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3360,i,13992399020196234883,4652966090562241172,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3480 /prefetch:14
                                                        6⤵
                                                          PID:1560
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3372,i,10387220395523264075,12731263247170634024,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3500 /prefetch:14
                                                          6⤵
                                                            PID:228
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3324,i,9803057642392421546,14800894749484568297,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3420 /prefetch:14
                                                            6⤵
                                                              PID:664
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3348,i,3497561642401788112,13114407898782267036,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3460 /prefetch:14
                                                              6⤵
                                                                PID:488
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3336,i,9520314572765932346,2114835074471277833,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3440 /prefetch:14
                                                                6⤵
                                                                  PID:5008
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3384,i,4015899126975664198,14357961858386648191,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3520 /prefetch:14
                                                                  6⤵
                                                                    PID:4732
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4212,i,7002532917802085914,6095677149344468315,1572864 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4252 /prefetch:1
                                                                    6⤵
                                                                      PID:2332
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_gx_splash.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
                                                                      6⤵
                                                                        PID:5248
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4748,i,13159888980155677877,8310183189276799221,1572864 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4760 /prefetch:1
                                                                        6⤵
                                                                          PID:5744
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5080,i,10801873111264231702,16317830736719226694,1572864 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5124 /prefetch:9
                                                                          6⤵
                                                                            PID:5816
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5248,i,9395948747125860838,1428018388130872349,1572864 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5256 /prefetch:1
                                                                            6⤵
                                                                              PID:5848
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5388,i,3629802503593090346,890452413285464153,1572864 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5408 /prefetch:1
                                                                              6⤵
                                                                                PID:5860
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5516,i,11207895070696697419,3082597422441111331,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5528 /prefetch:14
                                                                                6⤵
                                                                                  PID:5876
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5524,i,5583750142030892283,6025004340801154838,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5532 /prefetch:14
                                                                                  6⤵
                                                                                    PID:5884
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5536,i,4568543851487927955,15823296244574068778,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5548 /prefetch:14
                                                                                    6⤵
                                                                                      PID:5892
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5540,i,2596604297083178100,5245353402365238380,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=5560 /prefetch:14
                                                                                      6⤵
                                                                                        PID:5904
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6348,i,14664969768481172242,11914245293416654967,1572864 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5668 /prefetch:9
                                                                                        6⤵
                                                                                          PID:6040
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6820,i,7220082860320870,7323165583785410136,1572864 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6848 /prefetch:9
                                                                                          6⤵
                                                                                            PID:5408
                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5392,i,14092734557781887586,4172138286615196455,1572864 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=6088 /prefetch:1
                                                                                            6⤵
                                                                                              PID:6800
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7144,i,14784241555750182162,218683428865955276,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6688 /prefetch:12
                                                                                              6⤵
                                                                                                PID:3940
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
                                                                                                6⤵
                                                                                                  PID:6504
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x284,0x288,0x28c,0x260,0x290,0x7ff67dd2cde8,0x7ff67dd2cdf8,0x7ff67dd2ce08
                                                                                                    7⤵
                                                                                                      PID:5980
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7800,i,16384561852016183170,9515526994488581786,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7820 /prefetch:14
                                                                                                    6⤵
                                                                                                      PID:6556
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7808,i,3198954367826139880,5472745137981502292,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7772 /prefetch:14
                                                                                                      6⤵
                                                                                                        PID:6828
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7928,i,4436587251375660077,17291358451146354380,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=8076 /prefetch:14
                                                                                                        6⤵
                                                                                                          PID:6564
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8204,i,594669325497748337,2268477162834646079,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8216 /prefetch:14
                                                                                                          6⤵
                                                                                                            PID:6608
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8232,i,5523282512380409971,9025220883028107795,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8244 /prefetch:14
                                                                                                            6⤵
                                                                                                              PID:6628
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8492,i,2805983108724820709,9324832450492396839,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8500 /prefetch:14
                                                                                                              6⤵
                                                                                                                PID:6636
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8508,i,2356173312943155738,784849541647817564,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8648 /prefetch:14
                                                                                                                6⤵
                                                                                                                  PID:6060
                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8780,i,3213979676312255955,11476713362025456659,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8792 /prefetch:14
                                                                                                                  6⤵
                                                                                                                    PID:5612
                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=8928,i,7862265541477743640,4780240649270140316,1572864 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8940 /prefetch:9
                                                                                                                    6⤵
                                                                                                                      PID:7000
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9092,i,18256425794186922404,305813315672605429,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=9108 /prefetch:14
                                                                                                                      6⤵
                                                                                                                        PID:7016
                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9100,i,17263036744801392003,1745056210288436183,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9128 /prefetch:14
                                                                                                                        6⤵
                                                                                                                          PID:7028
                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9144,i,15784476827044222196,8523187936470660253,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9136 /prefetch:14
                                                                                                                          6⤵
                                                                                                                            PID:7036
                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9280,i,11847412702252406824,8282971694699092146,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9300 /prefetch:14
                                                                                                                            6⤵
                                                                                                                              PID:7060
                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9272,i,3157254802950219926,16974014706853249547,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9440 /prefetch:14
                                                                                                                              6⤵
                                                                                                                                PID:5160
                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9796,i,6320392818133678736,13209445961279475104,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9792 /prefetch:14
                                                                                                                                6⤵
                                                                                                                                  PID:2312
                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=10144,i,7348066547991601442,2079071583058412113,1572864 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10180 /prefetch:1
                                                                                                                                  6⤵
                                                                                                                                    PID:6996
                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10324,i,17087368837712267921,2821357787395580927,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10332 /prefetch:14
                                                                                                                                    6⤵
                                                                                                                                      PID:6812
                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10388,i,6120917568090879938,12515054998785656494,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10400 /prefetch:14
                                                                                                                                      6⤵
                                                                                                                                        PID:4444
                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:auto-gaming-intent-suggestion=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10556,i,9495451277386174720,5176716140954504368,524288 --field-trial-handle=1840,i,127273265334186985,9347577762165007483,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,17167808069363672547,312449471369243964,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10568 /prefetch:14
                                                                                                                                        6⤵
                                                                                                                                          PID:3880
                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\Opera_GX_assistant_139.0.6053.42_Setup.exe_sfx.exe
                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\Opera_GX_assistant_139.0.6053.42_Setup.exe_sfx.exe"
                                                                                                                                    3⤵
                                                                                                                                    • Executes dropped EXE
                                                                                                                                    • Writes a Windows system DLL name to a user directory
                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                    PID:228
                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\assistant_installer.exe
                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\assistant_installer.exe" --version
                                                                                                                                    3⤵
                                                                                                                                    • Executes dropped EXE
                                                                                                                                    • Loads dropped DLL
                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                    • Enumerates system info in registry
                                                                                                                                    • Suspicious use of WriteProcessMemory
                                                                                                                                    PID:2112
                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\assistant_installer.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x1237598,0x12375a4,0x12375b0
                                                                                                                                      4⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      • Loads dropped DLL
                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                      PID:2096
                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --autostart
                                                                                                                                1⤵
                                                                                                                                  PID:2488
                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                                                                                    2⤵
                                                                                                                                      PID:5144
                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe
                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x128,0x12c,0x134,0x130,0x138,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a0
                                                                                                                                        3⤵
                                                                                                                                          PID:5256
                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                                                                                        2⤵
                                                                                                                                          PID:5496
                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe
                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x12c,0x130,0x134,0x128,0x138,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a0
                                                                                                                                            3⤵
                                                                                                                                              PID:5520
                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x27c,0x280,0x284,0x258,0x288,0xff5f68,0xff5f74,0xff5f80
                                                                                                                                            2⤵
                                                                                                                                              PID:5588
                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                                                                                                3⤵
                                                                                                                                                  PID:5608
                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe
                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x12c,0x130,0x134,0x128,0x138,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a0
                                                                                                                                                    4⤵
                                                                                                                                                      PID:5628
                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                                                                                                    3⤵
                                                                                                                                                      PID:5708
                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe
                                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x12c,0x130,0x134,0x128,0x138,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a0
                                                                                                                                                        4⤵
                                                                                                                                                          PID:5736
                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                                                                                                        3⤵
                                                                                                                                                          PID:6876
                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe
                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x12c,0x130,0x134,0x128,0x138,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a0
                                                                                                                                                            4⤵
                                                                                                                                                              PID:6936
                                                                                                                                                      • C:\Windows\system32\wbem\unsecapp.exe
                                                                                                                                                        C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                                                                                        1⤵
                                                                                                                                                          PID:5688
                                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart
                                                                                                                                                          1⤵
                                                                                                                                                            PID:7112
                                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe
                                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x12c,0x130,0x134,0x128,0x138,0x7ffbd195c480,0x7ffbd195c490,0x7ffbd195c4a0
                                                                                                                                                              2⤵
                                                                                                                                                                PID:3112
                                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
                                                                                                                                                              1⤵
                                                                                                                                                                PID:6864
                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=139.0.6053.42 --initial-client-data=0x280,0x284,0x288,0x218,0x28c,0x7ff67dd2cde8,0x7ff67dd2cdf8,0x7ff67dd2ce08
                                                                                                                                                                  2⤵
                                                                                                                                                                    PID:6188

                                                                                                                                                                Network

                                                                                                                                                                      MITRE ATT&CK Enterprise v16

                                                                                                                                                                      Replay Monitor

                                                                                                                                                                      Loading Replay Monitor...

                                                                                                                                                                      Downloads

                                                                                                                                                                      snapshot-new.baf

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\Cache\No_Vary_Search\snapshot-new.baf
                                                                                                                                                                      • Size 20B
                                                                                                                                                                      • SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                      f_000001

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\System Cache\Cache_Data\f_000001
                                                                                                                                                                      • Size 216KB
                                                                                                                                                                      • SHA256 a030b34e41b7f4b91ee36f472f12095c52299edbbdbc4dfc0b3ae21d7c56f248
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      139.0.6053.42.manifest

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\139.0.6053.42.manifest
                                                                                                                                                                      • Size 225B
                                                                                                                                                                      • SHA256 72d360ad77949cb4bb29d37d2552b9be796d3de8873dcc24874ac9e8cefe83ce
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      150x150Logo.scale-100.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\150x150Logo.scale-100.png
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      150x150Logo.scale-100_contrast-white.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      150x150Logo.scale-140.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\150x150Logo.scale-140.png
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 a36a13a5d5e3d39e3018ccc5f8859944c87256f8be24a3c08a6bf3cb06a26804
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      150x150Logo.scale-140_contrast-white.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\150x150Logo.scale-140_contrast-white.png
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 0bd63fe653885286e180fbdf6d1dadc66af242b8ed6bd1d03d8c5eccc20e91d7
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      150x150Logo.scale-180.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\150x150Logo.scale-180.png
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 6a8f64754c75edcc9abc1138e44acbd7064d7e8e2a28783939241dbd6afa30a5
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      150x150Logo.scale-180_contrast-white.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\150x150Logo.scale-180_contrast-white.png
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 a706b332e6a846357a86c30d0e8bb7697e7dd55c2ae592dd45611ddce0c0bf14
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      150x150Logo.scale-80.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\150x150Logo.scale-80.png
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 7e6b0d9ea7fda1b5ca7a0b01290521dff943da4cbf1498412ca7d749db42c32d
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      150x150Logo.scale-80_contrast-white.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\150x150Logo.scale-80_contrast-white.png
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 dfd1054f989cdee25f19ea792f363f042a125cab537a424f0224bbee13607e39
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      70x70Logo.scale-100.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\70x70Logo.scale-100.png
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 a333d7e4293f5269426b3fcb673a284f3708a66f957de62403b6570b24bae8f5
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      70x70Logo.scale-100_contrast-white.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\70x70Logo.scale-100_contrast-white.png
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 ebbe0b4761ea8968a0a3fafb383ac7ae175e98cd31a0f41bdf5fcb43469b58ec
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      70x70Logo.scale-140.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\70x70Logo.scale-140.png
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 207519f1c7b6c7509bfeb7b55724997eec6456c8baf55e882e72fc5cd43da221
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      70x70Logo.scale-140_contrast-white.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\70x70Logo.scale-140_contrast-white.png
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 464afaf960c32abdc2c3937a48bf14c5d1a819b017e719fded591d43a65d94c4
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      70x70Logo.scale-180.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\70x70Logo.scale-180.png
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 d6367dbc074e37f3488c26b0bad229bfe99f5c6bb0e28d37b41906c436152b57
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      70x70Logo.scale-180_contrast-white.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\70x70Logo.scale-180_contrast-white.png
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 5d46e4056f3915c279f1fa9edf61d93529fbcae5c59d616380ec5d9405b7763d
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      70x70Logo.scale-80.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\70x70Logo.scale-80.png
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 dc20e5aa2b500cd5b5c9f89647d3487810685c94268f22678e27820e2454bb3e
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      70x70Logo.scale-80_contrast-white.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\Assets\70x70Logo.scale-80_contrast-white.png
                                                                                                                                                                      • Size 901B
                                                                                                                                                                      • SHA256 dd6f46d32c3e235508f9e4c7d7f993bd807d955bca7e63cf3d57c6c4c102f46d
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      CChromaEditorLibrary64.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\CChromaEditorLibrary64.dll
                                                                                                                                                                      • Size 145KB
                                                                                                                                                                      • SHA256 cd84acda3de582df0c11fbf5cbba879fbdcf974041d140e760e8ac0828c3b954
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      CUESDK.x64_2017.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\CUESDK.x64_2017.dll
                                                                                                                                                                      • Size 474KB
                                                                                                                                                                      • SHA256 0778470cd9fee3966b3064624d30169848e64937009eabf573ac1ecf56076c8e
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      assistant_package

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\assistant_package
                                                                                                                                                                      • Size 4.0MB
                                                                                                                                                                      • SHA256 e01abdd95ed59e805006f1b46eb476063c619f5aa47f35973611de7cea65c86b
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      d3dcompiler_47.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\d3dcompiler_47.dll
                                                                                                                                                                      • Size 4.5MB
                                                                                                                                                                      • SHA256 c62aa16c1819af172009d76c9e586df8aa5dc9dc04df29107139d3ebb3a78eb1
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      dxcompiler.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\dxcompiler.dll
                                                                                                                                                                      • Size 24.7MB
                                                                                                                                                                      • SHA256 ac3bbfa0c7e598090127d7a00e6d69fe1b1fdf92aae52caed5f26b98c2f36b92
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      files_list

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\files_list
                                                                                                                                                                      • Size 4KB
                                                                                                                                                                      • SHA256 17f800bbc75883adc4055c35af37fd428db248cd1e507e5ff551cc4bba5e1265
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      headless_command_resources.pak

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\headless_command_resources.pak
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 0ee35aeeb7c9a7beb89664639100c70320f1164f0266b1d1ae91b8e6a3237398
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      icudtl.dat

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\icudtl.dat
                                                                                                                                                                      • Size 10.4MB
                                                                                                                                                                      • SHA256 113f7464a507af4f7d2b0ea73094217881386f19dac7cacc5f071e7a4cf04a20
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      installer.exe

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\installer.exe
                                                                                                                                                                      • Size 9.4MB
                                                                                                                                                                      • SHA256 212144535e50b2240895f727887316d410ba55e448a87d90fc73f5e09aea2b8d
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      installer_helper_64.exe

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\installer_helper_64.exe
                                                                                                                                                                      • Size 617KB
                                                                                                                                                                      • SHA256 d310b1302bfd92060b5a706da5f677a626770435db62ee7c49bf4983ed20a547
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libEGL.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\libEGL.dll
                                                                                                                                                                      • Size 455KB
                                                                                                                                                                      • SHA256 4dc3741a85ba909bd1ea9885a17c2dff4a663786a4337555144b469a1f842713
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      libGLESv2.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\libGLESv2.dll
                                                                                                                                                                      • Size 455KB
                                                                                                                                                                      • SHA256 dd169872125412554385b8b20ad2c779971bcb35cfb28e1c48553c6fe9f351d3
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      bg.pak

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\bg.pak
                                                                                                                                                                      • Size 1012KB
                                                                                                                                                                      • SHA256 07e20274ff2c395b5d15b73d21d7d16249023527847b236e3eebdf04f1031e9f
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      bn.pak

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\bn.pak
                                                                                                                                                                      • Size 1.3MB
                                                                                                                                                                      • SHA256 8d70d1cd1c3110e092ed8f3326d2d73306cdb4620a962dd75cd1a7eca05261eb
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      ca.pak

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\ca.pak
                                                                                                                                                                      • Size 638KB
                                                                                                                                                                      • SHA256 24a3af7f05e2c6368ae5470a74139a7d5230398144abd808077c39b9f5860c09
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      cs.pak

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\cs.pak
                                                                                                                                                                      • Size 637KB
                                                                                                                                                                      • SHA256 45c3114b093975eb3f13a5016b518bc0d09baae39287a01a5bb97590e22c314a
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      da.pak

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\da.pak
                                                                                                                                                                      • Size 585KB
                                                                                                                                                                      • SHA256 b272567e903769c7d4d4722b147e138636538f36290b9bbc810a192fff5f3223
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      de.pak

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\de.pak
                                                                                                                                                                      • Size 634KB
                                                                                                                                                                      • SHA256 82a30fd2c5ce34ac7ebe00acc41e7263c02d988ba42bca2e72c57e8aafb94b69
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      el.pak

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\el.pak
                                                                                                                                                                      • Size 1.1MB
                                                                                                                                                                      • SHA256 e7a9d0025762e696387551865a9c71c2375472cf920b574d87174e2fd90533fd
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      en-GB.pak

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\en-GB.pak
                                                                                                                                                                      • Size 514KB
                                                                                                                                                                      • SHA256 d1667143887fca50383476082c025127bb4e4945f05c473f53894219a8edd1a6
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      en-US.pak

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\en-US.pak
                                                                                                                                                                      • Size 518KB
                                                                                                                                                                      • SHA256 58e27ecbd2ae8679be2776bf05faa2b2fb7606a616d448f9c9866b6e48a25d19
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      es-419.pak

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\es-419.pak
                                                                                                                                                                      • Size 626KB
                                                                                                                                                                      • SHA256 874015d90dfefdb929678a86915de478d3c6d29ee1a46f54d4c555bbbd7cdf48
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      es.pak

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\es.pak
                                                                                                                                                                      • Size 619KB
                                                                                                                                                                      • SHA256 0a316117563288a07398538b01a775483fcf4608049418b1ddb9570e5c15374a
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      fi.pak

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\139.0.6053.42\localization\fi.pak
                                                                                                                                                                      • Size 583KB
                                                                                                                                                                      • SHA256 c1e3b89fb91e2c100d9fd9e82f410bd3c042dd286e47f0cc4f145807fd72c94e
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      browser_assistant.exe

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                                                                                                                      • Size 5.5MB
                                                                                                                                                                      • SHA256 5f08c5e0453ca7eb864f0b2776075b292b1cb4743d7e457d5311e62b6ad558ea
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      opera_autoupdate.exe

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                                                                      • Size 7.6MB
                                                                                                                                                                      • SHA256 cac04b88255ca99eb316d581c66d7daf376b7169fb26999b58c3bbf5ca084f4a
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      installer_prefs.json.backup

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json.backup
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 d4fb8dbe438f2e4abae4d36c4b7e0ed4e06c5ca4601842cc65e1d953491b8a01
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      opera.exe

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                      • Size 3.5MB
                                                                                                                                                                      • SHA256 d49e8226c1229d81b856197ea3b753061cc21d0832019a195fb7deeee2fa7f37
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      Opera GX Browser.lnk

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\Opera GX Browser.lnk
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 712396a1f6e0f5c95fafd970679142bfd5d1897a73d33b7c3dc2e57a48a7af94
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      additional_file0.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\additional_file0.tmp
                                                                                                                                                                      • Size 3.2MB
                                                                                                                                                                      • SHA256 3d8fe736f12f1784f79b99e7badc36690a0ef17f7e13d661333aec8c727a4903
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      assistant_installer.exe

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\assistant_installer.exe
                                                                                                                                                                      • Size 2.5MB
                                                                                                                                                                      • SHA256 934889496e2120831200b50fdac5559057db461e93ec67a6915832aa95c2c2eb
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      dbgcore.DLL

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\dbgcore.DLL
                                                                                                                                                                      • Size 238KB
                                                                                                                                                                      • SHA256 53fd524e2e9b50369697a784cb7b47a65981619099d81a3dead96004da47475a
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      dbghelp.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\assistant\dbghelp.dll
                                                                                                                                                                      • Size 589KB
                                                                                                                                                                      • SHA256 c108ea3ba05b254a1d67dfc40457686ed4a737767a3e282f9e67fc3fa4b8a6a0
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      installer_prefs_include.json

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\installer_prefs_include.json
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 5ec5d03e37e3ab96a18295d5c4ce3bc5653a4e03f3d353b731379fb3e8e4e4d1
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      installer_prefs_include.json7aaad8e2-f96a-4a01-80b3-7a0009bc0d35.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\installer_prefs_include.json7aaad8e2-f96a-4a01-80b3-7a0009bc0d35.tmp
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 b04465459dc19d8674638d23c47aafaeaaafb6b7e872e22a9f150f142cf21707
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      installer_prefs_include.jsonb4a57c68-f88c-4a7a-985d-2cf994ea4f78.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\cc8cd0d9-9049-448b-93b4-a8a79d7dc2dc Opera GX Installer Temp\opera_package_202611101232081\installer_prefs_include.jsonb4a57c68-f88c-4a7a-985d-2cf994ea4f78.tmp
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 a596551f5e36595b831a6f74cb65f3530a1bd5d9ef35f8bcab1900b952096977
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      installer.exe

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\7zS020925C8\installer.exe
                                                                                                                                                                      • Size 9.4MB
                                                                                                                                                                      • SHA256 2df5559bbca8e95b320e3b7cf580c61970043bf485505664aa21c9da2038739c
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      Opera GX Browser.lnk

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera GX Browser.lnk
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 446ea4cc59029cd2838ab532e7f1dcf098b0288e78ec042d8b3ec421ef2d3aeb
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      settings.dat

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                                                                                                                                                      • Size 40B
                                                                                                                                                                      • SHA256 11b721589b4443b63ffd0d2dd05339a61cd413367e4a808b10837f2bcabf260f
                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                      data_0

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_0
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                      data_1

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_1
                                                                                                                                                                      • Size 264KB
                                                                                                                                                                      • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                      data_2

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_2
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                      data_3

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_3
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                      MANIFEST-000001

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\MANIFEST-000001
                                                                                                                                                                      • Size 41B
                                                                                                                                                                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                      SCT Auditing Pending Reports

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                      • Size 2B
                                                                                                                                                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                      Opera Custom Icon.ico5efe8967-dc83-4489-87db-527df61a3f9f.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Opera Custom Icon.ico5efe8967-dc83-4489-87db-527df61a3f9f.tmp
                                                                                                                                                                      • Size 162KB
                                                                                                                                                                      • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      index

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Shared Dictionary\cache\index
                                                                                                                                                                      • Size 24B
                                                                                                                                                                      • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                      CURRENT

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Site Characteristics Database\CURRENT
                                                                                                                                                                      • Size 16B
                                                                                                                                                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw
                                                                                                                                                                      • Size 509B
                                                                                                                                                                      • SHA256 eef5226fcbf052bcfcc182e63df602dc43363ced969801c72b435e8c0e85109c
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw0c65615e-c2fe-4f8e-9923-568627a8f518.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw0c65615e-c2fe-4f8e-9923-568627a8f518.tmp
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 619c4fc39f0ef8a5824403a2eb2c6aa12a68afa764b7a062cbb68b1fed4a2bbd
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw0cdf76e2-f75c-4202-9216-21915f386815.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw0cdf76e2-f75c-4202-9216-21915f386815.tmp
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 cc079e4ae647f7824ccb9b7d6d1f9e9358e341520eb632ef06af1948414d3042
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw11e22c05-0f11-41e7-88a9-8bd686dff24b.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw11e22c05-0f11-41e7-88a9-8bd686dff24b.tmp
                                                                                                                                                                      • Size 11KB
                                                                                                                                                                      • SHA256 033ee7f1b12770ec088ecad5ef14a5579de8dc581c35b912338740907ca23a3b
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw1d77ebb8-7c84-48df-a1b6-6adeef6efcff.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw1d77ebb8-7c84-48df-a1b6-6adeef6efcff.tmp
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 b8fbbb2ec9e56aa84acbea51b84363af19ac7f859166dab2126f766e0b5bb69d
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw22f764ca-4667-4cbf-b1a0-0a2b5b61e558.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw22f764ca-4667-4cbf-b1a0-0a2b5b61e558.tmp
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 d5a503b4a2bdc0b2ec533f09f33557991c30b70bd5c7f5e9435a6cd417f48f39
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw24debc5d-0f72-4aa1-94bf-9cad46f900a1.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw24debc5d-0f72-4aa1-94bf-9cad46f900a1.tmp
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 c3719457fdcb19d864a0fe04b32967d5663c3d48346e1f623046a87c790af148
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw2a9330ba-858d-4258-a583-0671317ce764.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw2a9330ba-858d-4258-a583-0671317ce764.tmp
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 801a8a55721d7ddf52143b363b6ffefbb68bf193422d4dd7042c49f7deaad3fa
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw32713758-a155-4841-90a0-000052949b7b.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw32713758-a155-4841-90a0-000052949b7b.tmp
                                                                                                                                                                      • Size 733B
                                                                                                                                                                      • SHA256 f56acfa7d0c1cbf184a3c8897121c4a205e1cdf9b1561e3e86bd7158e58cd9cf
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw34b2e611-ea38-456a-bbde-c2f41d833805.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw34b2e611-ea38-456a-bbde-c2f41d833805.tmp
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 b2fad10042a645a9753dd2a5097ce9eb44451c947f97664d248b0d7cf608bc05
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw3c8e6b95-ee1a-4adf-aefc-7c5139dd9922.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw3c8e6b95-ee1a-4adf-aefc-7c5139dd9922.tmp
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 79ddb03cb6ff1e39dc0995a1acc8288d6a981039768428dc88d8fbdffb36af41
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw3ce5890f-f6a9-4477-b7b2-337c59640359.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw3ce5890f-f6a9-4477-b7b2-337c59640359.tmp
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 67ffd3ebda5f4ba4e4191ea53a50301b70b5771ef48b3cac999bb998ded13f2f
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw3f72b7f4-66c6-4b52-867d-e73ab29d1ceb.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw3f72b7f4-66c6-4b52-867d-e73ab29d1ceb.tmp
                                                                                                                                                                      • Size 10KB
                                                                                                                                                                      • SHA256 43e7b01c086fe38ea475ca4a4d40a7c480a6044ed1c8147ff8a493d430b45c63
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw3fb0f883-0134-4fa1-99ea-8c037c98eac3.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw3fb0f883-0134-4fa1-99ea-8c037c98eac3.tmp
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 9a5c029a7268b545dd8e845616d090787f8f74ef03cdc0e072d7ea41ce831fd8
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw41e2d93a-d486-4ee9-8e71-a6cf91318f42.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw41e2d93a-d486-4ee9-8e71-a6cf91318f42.tmp
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 b507ff9cbe0830081d0e0b68cfccd59e36c4324af399e4e19cf14af1318ce12e
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw4213ec9e-7c5f-4e50-becb-35aafed3bbf4.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw4213ec9e-7c5f-4e50-becb-35aafed3bbf4.tmp
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 74d5e9d7f730528e8b083006220b56d413a9ebfd7b6aad80f50971e8456bf95c
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw4e41f370-dae8-4c53-b3e0-be79511d37d5.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw4e41f370-dae8-4c53-b3e0-be79511d37d5.tmp
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 6e331b3d0f3dfdd2d904d7b24e528f75cc68fa2b97809200c7950251cb1ea54a
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw579ff1fd-406b-47fc-88e6-e1584377473b.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw579ff1fd-406b-47fc-88e6-e1584377473b.tmp
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 8da95dd611f6ef1eaa52bda5ad0eb2493ba684b738491aa1fdb4a0e0c5ae54a7
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw6512a69d-0e84-4fc5-aa46-b03a182bdc87.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw6512a69d-0e84-4fc5-aa46-b03a182bdc87.tmp
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 9ffbefa6487d3120eb12259c7b978aabd7e2752e647087472584be24f6e70d3f
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw69830eae-b0ce-4ff1-96e2-a7ef951b84c9.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw69830eae-b0ce-4ff1-96e2-a7ef951b84c9.tmp
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 2f8fbbebf7c5a2d1e84d7877bc7353b299eda01462965fa7fb777d89236d6942
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw71c126ca-3277-46c7-a097-32426ec3918d.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw71c126ca-3277-46c7-a097-32426ec3918d.tmp
                                                                                                                                                                      • Size 605B
                                                                                                                                                                      • SHA256 ef88c09d49984127df3aa637a21d0a0016f688d80a2012430738e8ebab1ad045
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw74649e23-6042-40dc-8a5b-9eaf97e57523.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw74649e23-6042-40dc-8a5b-9eaf97e57523.tmp
                                                                                                                                                                      • Size 11KB
                                                                                                                                                                      • SHA256 13c824c82a1e36d1fdf9ce0df2e7ba6939d0eb24564384ab044b719e7ce7d7b7
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw760c5a65-3684-451a-b2ab-db00e5579804.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw760c5a65-3684-451a-b2ab-db00e5579804.tmp
                                                                                                                                                                      • Size 10KB
                                                                                                                                                                      • SHA256 5cf33bf97dba10a32444a7c716d0de219c0d90009ad90a687c5df1cfe8ebc060
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw76d0cae8-379d-4d5d-9cd4-902901bd9201.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw76d0cae8-379d-4d5d-9cd4-902901bd9201.tmp
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 3b8191be0fb908c99a2b49556442c289da887a324b690591aa48ad64d2c4c1ec
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw77777d7e-48fa-4b68-9b6b-a4b562e96c60.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw77777d7e-48fa-4b68-9b6b-a4b562e96c60.tmp
                                                                                                                                                                      • Size 10KB
                                                                                                                                                                      • SHA256 b9d49f57c6cfe02b65d801423a0cc372d4f20faa78c554bd2fdb13db09343d6e
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw7916689f-aadb-4e36-9a51-af1d7f642b4d.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw7916689f-aadb-4e36-9a51-af1d7f642b4d.tmp
                                                                                                                                                                      • Size 861B
                                                                                                                                                                      • SHA256 328578fa6041fe822a5e309ff16e3d44ed189c0888e31126d06b92dece8c7c6d
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw875a4bfb-0e6c-4889-b15e-fc92ac0039ee.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw875a4bfb-0e6c-4889-b15e-fc92ac0039ee.tmp
                                                                                                                                                                      • Size 11KB
                                                                                                                                                                      • SHA256 a1ea3a323294ce440609d859de067ee24faa6f331fc217d6192a2c940d6859fa
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw8af3ceec-efb6-4af6-be32-a8a03a728e06.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw8af3ceec-efb6-4af6-be32-a8a03a728e06.tmp
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 57cdce515513f24e80c4430e8799988a248a021ccd85d3347ec4a5c6dbe241ce
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw90c61f61-c83b-495d-b8a1-13559be78f76.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw90c61f61-c83b-495d-b8a1-13559be78f76.tmp
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 f1ddc74ccbc38fa498d1f4d0946d78ed53b2566a24c9bd3716c0c1ae77d4a3b0
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw914f8c84-3aba-4cda-8a3f-376e7af53654.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw914f8c84-3aba-4cda-8a3f-376e7af53654.tmp
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 453ace4c6c05a1d1157e909a717e4e951ede0dc84e918afbf3f2c03f39769341
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw928041e7-120e-487b-885e-5f4ffc7f1616.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw928041e7-120e-487b-885e-5f4ffc7f1616.tmp
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 fad453c4d953515deddc58ce48e29f1f81c5a86404eef2e22ad1727ffd5032c9
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw9812bb8f-2531-4674-bbfc-4914653fef10.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.raw9812bb8f-2531-4674-bbfc-4914653fef10.tmp
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 c32f278914fd6993fabafb24c14fb990e251127d29ebfbdd1cb9daf2f448d02b
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawabe7f2c6-f5dc-43a4-9585-234545c5c6b2.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawabe7f2c6-f5dc-43a4-9585-234545c5c6b2.tmp
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 fd0f28c683250f2481daa7614eefa621d64502e79bc8f97b7a7bbb220f4d4776
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawaf1bf1f6-d0df-476a-898d-f8072a8fc70c.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawaf1bf1f6-d0df-476a-898d-f8072a8fc70c.tmp
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 cd0d304b513580fe32895be16c83fd0bcb9c00222c09f784332b7f82eaf43205
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawb7413a6e-fe60-46ab-bb36-442d873d947d.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawb7413a6e-fe60-46ab-bb36-442d873d947d.tmp
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 8145a652a7f46e3b4d3301be83d1fa936baf06519bb8fed3cd72a21dc0b620de
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawbfc4a239-22b3-4f62-953d-b264979a98c0.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawbfc4a239-22b3-4f62-953d-b264979a98c0.tmp
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 cc56820c78bf459b800ea8a213d6cdd7469e82e68b13cf95d94fad18dc85a943
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawc231ebd8-95a4-4512-99a0-0833fa4f8e50.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawc231ebd8-95a4-4512-99a0-0833fa4f8e50.tmp
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 5246b14ead9935e86e39d11b04fb854f1da6f67e8c8c9ad0e4841cf13d871d33
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawc393faf7-d729-4519-ba9f-9c2d11d50393.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawc393faf7-d729-4519-ba9f-9c2d11d50393.tmp
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 3a5d8ba455313510ec454e0b03c9310fea05599c856908bef47ea0efbfbaa0ef
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawce2b4d5f-c51e-45cf-8f75-191ef2d62170.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawce2b4d5f-c51e-45cf-8f75-191ef2d62170.tmp
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 91dc8adbfc4e479909beffc408c698a79c8dfe1773b2efdec84529b59cb6bd5a
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawd1e32b34-0eca-4f3d-8720-b01f38f7b6fd.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawd1e32b34-0eca-4f3d-8720-b01f38f7b6fd.tmp
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 c72714b247503a1bfd9bbe68b0cc6458204cd1dd7bbcbf31c9b8a74d2ac1f804
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawd6a4668a-a5ca-4341-be2d-cf626e702da8.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawd6a4668a-a5ca-4341-be2d-cf626e702da8.tmp
                                                                                                                                                                      • Size 10KB
                                                                                                                                                                      • SHA256 0d18bb0383db6db0efc26b496bb6f9aa4060131407c7f6346ea4a31bac6770c2
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawd7cbbfb6-353e-4cba-90f2-1636a8db971b.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawd7cbbfb6-353e-4cba-90f2-1636a8db971b.tmp
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 5a7ad4c7363fe58a5c2d1f3522a976a8a1a6b6d652d01da62562e293fabc2e26
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawdaab8cf5-0972-4ffd-ac19-2da0ee8ee5cc.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawdaab8cf5-0972-4ffd-ac19-2da0ee8ee5cc.tmp
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 37461ce37c7bb795afa611fbc193e6314b2aff677a234faeacfcf3243e1787ae
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawdff16fe8-d069-446b-838a-5131b8c4db36.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawdff16fe8-d069-446b-838a-5131b8c4db36.tmp
                                                                                                                                                                      • Size 10KB
                                                                                                                                                                      • SHA256 959411b8d518a61965f525557f300bd747f4cbc91c66ded53a89ee97048e53d0
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawe2793625-db87-4f55-b5b5-9b91237985f0.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawe2793625-db87-4f55-b5b5-9b91237985f0.tmp
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 923f39f69ef8078c8e5bfe4647617d1551a306e2fdad857791103b7842de5dfe
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawe4a2a158-53c9-4120-80ff-3b3191cfbff6.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawe4a2a158-53c9-4120-80ff-3b3191cfbff6.tmp
                                                                                                                                                                      • Size 11KB
                                                                                                                                                                      • SHA256 4944d846c66a8df01b4e246bd6047f77ab89fbd09c6f42f30a802022c3997a64
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawe99054be-3635-477a-a2ac-1df13091787f.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawe99054be-3635-477a-a2ac-1df13091787f.tmp
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 c5c1e6a1b7d178000aaba4fb068c0355899dc15b62c367c48f8ebc74ea68b129
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawec87b133-3b15-4c74-8869-d2e51858e9b1.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawec87b133-3b15-4c74-8869-d2e51858e9b1.tmp
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 15a02cb87b85b366fabbc4a6fc8c5b95c9259f38fa5c72922c2958579ae58cf7
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawf16c6bb5-7243-4dcb-8902-e45ced3dbd94.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawf16c6bb5-7243-4dcb-8902-e45ced3dbd94.tmp
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 43e0984a76b28288bcff1c01b25f2b38c54e56b366809ad9c9270a0fc3bbd1d3
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawfdcef3a4-5645-49d6-83cf-eeec87748671.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawfdcef3a4-5645-49d6-83cf-eeec87748671.tmp
                                                                                                                                                                      • Size 11KB
                                                                                                                                                                      • SHA256 13134c98bb965f1fa75bf55944f599624890665074632685773d26c0bade1d7b
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawff7a521e-cc08-4e74-8a7d-5b1a8ca4cd99.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6dda3edf-8ac3-4532-a4ec-ea1e868cf8de.rawff7a521e-cc08-4e74-8a7d-5b1a8ca4cd99.tmp
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 57b7b4aceac801d05057f580521b308c30f8afc7e50f242dd095b97a67b7d667
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      daily_wallpapers.json

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\daily_wallpapers.json
                                                                                                                                                                      • Size 4KB
                                                                                                                                                                      • SHA256 7fdd2937785f48c5518e4cccf5027096f1378046a5cb4e7443819cd6bd2f398b
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      spotlight_campaigns.json

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\spotlight_campaigns.json
                                                                                                                                                                      • Size 600B
                                                                                                                                                                      • SHA256 df3e30f0f72d9b4fd19e045b7b102386b0f8fcdcb1a54387e5adb572d9ebcdb7
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.0.1858751624

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624
                                                                                                                                                                      • Size 413B
                                                                                                                                                                      • SHA256 bbf8abf4b4e09206cc829d83c0249a49f0853e1d2efe89529d57c2f005e7ea5f
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.0.185875162403affedf-f132-4ab7-96e0-8cc451ecd4ca.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.185875162403affedf-f132-4ab7-96e0-8cc451ecd4ca.tmp
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 eeb7c14af07209780320af49410ce0cf2af3120f6bde1060194878f789e7d389
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.0.18587516240611c3d7-53a3-4ed6-b59e-3b64d284a42e.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.18587516240611c3d7-53a3-4ed6-b59e-3b64d284a42e.tmp
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 623781a5fb0ced63087bc7d6eeed09e4e8e961aefb784888675df562bdf49343
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.0.18587516240864e024-4f0b-4bb9-bcc5-bc2ee38bf566.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.18587516240864e024-4f0b-4bb9-bcc5-bc2ee38bf566.tmp
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 38d1e0ea9104fd4836da89579f229c6501e65512f8bf568e2cf6c47feb40ea9b
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.0.18587516240d71e739-d21a-4a0a-b894-8cd710a2d146.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.18587516240d71e739-d21a-4a0a-b894-8cd710a2d146.tmp
                                                                                                                                                                      • Size 591B
                                                                                                                                                                      • SHA256 10a835e98dc9f1f7576e1755d0fa5c42e0ba07c39da014dad6d1e54b95b7b3f8
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.0.185875162439c9e518-9381-46b4-a224-f9205e9ed006.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.185875162439c9e518-9381-46b4-a224-f9205e9ed006.tmp
                                                                                                                                                                      • Size 505B
                                                                                                                                                                      • SHA256 05b7fa08cf3a73fe01bf455a336576e37a0ed6fb0d9d8c742b8c273205581eea
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.0.185875162440da3665-1e29-4a29-a6bf-57784ddbd35c.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.185875162440da3665-1e29-4a29-a6bf-57784ddbd35c.tmp
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 5a87889a6d24dc8120601e4a9cd3f34f2df6834635523260c4a053c82f3a1666
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.0.1858751624410edf81-1af4-4bad-9168-8a62ab8b2a72.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624410edf81-1af4-4bad-9168-8a62ab8b2a72.tmp
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 21cb92f2cc320fe168091cb448618304a285b20c1089d3c9901ce563db3d211c
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.0.185875162449e4fca5-664c-4e58-817c-c9569b0cacce.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.185875162449e4fca5-664c-4e58-817c-c9569b0cacce.tmp
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 1c1ae5aef8e56ff46085ea0c4e146aa12180b0bfbf791800b88ccb31536f31d8
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.0.185875162469cb22d0-f23f-43c8-864d-3630b6e9451b.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.185875162469cb22d0-f23f-43c8-864d-3630b6e9451b.tmp
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 ec77b48f35d96ae33b4691bdeb380537bfd72302a843a45b4ff77ea50236e07b
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.0.18587516246d55b841-a2a7-48ba-adde-c51a61cf23a9.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.18587516246d55b841-a2a7-48ba-adde-c51a61cf23a9.tmp
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 c6c3d97d35e1068e9d231eeb16c6d142c30fb336ad604cf1712033cf0c029150
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.0.185875162477483f85-18ae-484e-b8fb-b60da06e0e44.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.185875162477483f85-18ae-484e-b8fb-b60da06e0e44.tmp
                                                                                                                                                                      • Size 863B
                                                                                                                                                                      • SHA256 8ca7757a83ede9eb5765d2985b301f1c2e50589f7ed13bf5398181188d69cdf1
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.0.1858751624938b3590-fb64-41e4-bd6d-095a9100477d.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624938b3590-fb64-41e4-bd6d-095a9100477d.tmp
                                                                                                                                                                      • Size 680B
                                                                                                                                                                      • SHA256 c7de418720151aed2fdb86a4a81c33870fd58ada899fa4473db20b87d464ac3d
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.0.1858751624a026a292-1428-42ce-88b6-0cdbfec8a93e.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624a026a292-1428-42ce-88b6-0cdbfec8a93e.tmp
                                                                                                                                                                      • Size 771B
                                                                                                                                                                      • SHA256 ce075b107a0acced025026eb42511edfe8fff8e5adbf33061915c36718e98d97
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.0.1858751624b3c5c120-c064-4c4a-a621-03f9bbce04b2.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624b3c5c120-c064-4c4a-a621-03f9bbce04b2.tmp
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 0fe4c14060e2c916a66ec86df78cb7b5d2d3e0f58ddad62c3e6a1429192beca6
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.0.1858751624ba4fcdf2-31f0-496a-9b44-1310e785fc78.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624ba4fcdf2-31f0-496a-9b44-1310e785fc78.tmp
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 256788bd43228b74bd0da93fa2d2c8117169aab673c6f51e5f3a59f1e907d26d
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.0.1858751624cac8c536-3d66-452b-8f6c-aa5efa84550b.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624cac8c536-3d66-452b-8f6c-aa5efa84550b.tmp
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 9aa97890a4e7ebb67f767cc695783592a3c1847a4da42874eca8757ecb9b1414
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.0.1858751624d49080f6-c165-46ea-8ce7-c8ec091cdf24.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624d49080f6-c165-46ea-8ce7-c8ec091cdf24.tmp
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 c0b28ce672d5d92079e699845612fb40657c594db62e349c719ba8ef0d4912ac
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.0.1858751624d6e38480-ef70-49e4-a2c3-d5762b718b86.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624d6e38480-ef70-49e4-a2c3-d5762b718b86.tmp
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 80179096a96fcff765c7d134015f0b2da180039ee0756256e01b1ba277fbb0d1
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.0.1858751624e0bb77f4-330f-4e08-accb-6aa0e311fad7.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624e0bb77f4-330f-4e08-accb-6aa0e311fad7.tmp
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 209d021b50fcc814b5296f2e327fe4efdd847f9b0a247f045316a8e111e7502b
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.0.1858751624ec091d77-a786-49ea-ae96-0829e72afd7d.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624ec091d77-a786-49ea-ae96-0829e72afd7d.tmp
                                                                                                                                                                      • Size 953B
                                                                                                                                                                      • SHA256 fa951ec107f046968fbc048f0fce882767d4ce7ec2506f81b7b271f676d3515e
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.0.1858751624ed9aa7c1-d6ec-4c3e-afdc-31b12f1e9c41.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624ed9aa7c1-d6ec-4c3e-afdc-31b12f1e9c41.tmp
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 b0ed0f4d55d93791b89469eb14ffd52dd82f16b5b54fe03e0f14464e269c89cf
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.0.1858751624fce8b4f9-d2c3-4eed-b5b0-de4f53d57718.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.0.1858751624fce8b4f9-d2c3-4eed-b5b0-de4f53d57718.tmp
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 5d085abc391f866bae89768c8e137344e52e2b82053f4ea0b33f3c5eb04197ea
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.1.12596648

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.1.12596648
                                                                                                                                                                      • Size 171B
                                                                                                                                                                      • SHA256 d91b4c76583eadef3963f850c8f7f8581080a77caa18fc8d3721cc4c6b94ee89
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.1.125966480006d175-170a-4859-8efa-8ba03f5500a7.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.1.125966480006d175-170a-4859-8efa-8ba03f5500a7.tmp
                                                                                                                                                                      • Size 224B
                                                                                                                                                                      • SHA256 0fb3cd22f64d256fa5c17402292bf5a890a6abf3874239074ed92cddf79b2cdd
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.1.12596648485a0da9-5ca9-4bc6-95e2-5a3a59884dbd.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.1.12596648485a0da9-5ca9-4bc6-95e2-5a3a59884dbd.tmp
                                                                                                                                                                      • Size 224B
                                                                                                                                                                      • SHA256 e77fd59df66140d063ffb5abc4a689edbf7c010b78ac1caa5fc16b3c3b2315f5
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.1.125966485d30736c-9e82-4576-9ea6-d302d1f4584e.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.1.125966485d30736c-9e82-4576-9ea6-d302d1f4584e.tmp
                                                                                                                                                                      • Size 200B
                                                                                                                                                                      • SHA256 1be1e5ce1fd29d048a8e2e21aeef4e5ea6630962abd7bfdcbe6b15b37b84fb82
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp3708.1.12596648ec4c9819-8a9e-4d25-b2e7-f4cef57c06cc.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3708.1.12596648ec4c9819-8a9e-4d25-b2e7-f4cef57c06cc.tmp
                                                                                                                                                                      • Size 224B
                                                                                                                                                                      • SHA256 d2a5b4cf4dbe00baa5082ac573dc0a37d6510519aaec90e8487212dfac8f45d4
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      VariationsSafeSeedV257cebc62-b905-4835-86a6-1be3000292e9.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\VariationsSafeSeedV257cebc62-b905-4835-86a6-1be3000292e9.tmp
                                                                                                                                                                      • Size 19B
                                                                                                                                                                      • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                      VariationsSeedV26e9e5dcc-c337-4bc5-b323-2a1e159bd13e.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\VariationsSeedV26e9e5dcc-c337-4bc5-b323-2a1e159bd13e.tmp
                                                                                                                                                                      • Size 11B
                                                                                                                                                                      • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                      memory/228-1420-0x0000021EDEB40000-0x0000021EDEB71000-memory.dmp

                                                                                                                                                                      memory/488-1422-0x0000021A17B40000-0x0000021A17B71000-memory.dmp

                                                                                                                                                                      memory/664-1421-0x00000197516E0000-0x0000019751711000-memory.dmp

                                                                                                                                                                      memory/1560-1419-0x000001F751D00000-0x000001F751D31000-memory.dmp

                                                                                                                                                                      memory/2312-1462-0x000002985B8F0000-0x000002985B921000-memory.dmp

                                                                                                                                                                      memory/2932-1456-0x000002035FBF0000-0x000002035FC21000-memory.dmp

                                                                                                                                                                      memory/2932-467-0x00007FFC07690000-0x00007FFC07691000-memory.dmp

                                                                                                                                                                      memory/2932-466-0x00007FFC06B60000-0x00007FFC06B61000-memory.dmp

                                                                                                                                                                      memory/3412-1455-0x00000204B9BD0000-0x00000204BB490000-memory.dmp

                                                                                                                                                                      memory/3880-1470-0x000001AEB7090000-0x000001AEB70C1000-memory.dmp

                                                                                                                                                                      memory/4284-1400-0x0000024462D30000-0x0000024462D61000-memory.dmp

                                                                                                                                                                      memory/4444-1468-0x000001D205D50000-0x000001D205D81000-memory.dmp

                                                                                                                                                                      memory/4732-1424-0x000001A10BA20000-0x000001A10BA51000-memory.dmp

                                                                                                                                                                      memory/5008-1423-0x000002A7A6F40000-0x000002A7A6F71000-memory.dmp

                                                                                                                                                                      memory/5160-1460-0x000001DF08520000-0x000001DF08551000-memory.dmp

                                                                                                                                                                      memory/5612-1444-0x0000019E6C2D0000-0x0000019E6C301000-memory.dmp

                                                                                                                                                                      memory/6060-1441-0x0000023E9B590000-0x0000023E9B5C1000-memory.dmp

                                                                                                                                                                      memory/6556-1437-0x0000029D10EF0000-0x0000029D10F21000-memory.dmp

                                                                                                                                                                      memory/6564-1442-0x000001CCB9040000-0x000001CCB9071000-memory.dmp

                                                                                                                                                                      memory/6608-1464-0x0000025263EA0000-0x0000025263ED1000-memory.dmp

                                                                                                                                                                      memory/6628-1439-0x00000227247F0000-0x0000022724821000-memory.dmp

                                                                                                                                                                      memory/6636-1443-0x000001DE30890000-0x000001DE308C1000-memory.dmp

                                                                                                                                                                      memory/6828-1438-0x000001A96FCD0000-0x000001A96FD01000-memory.dmp

                                                                                                                                                                      memory/7016-1447-0x000002016E040000-0x000002016E071000-memory.dmp

                                                                                                                                                                      memory/7028-1461-0x000001E384660000-0x000001E384691000-memory.dmp

                                                                                                                                                                      memory/7036-1448-0x00000290CF180000-0x00000290CF1B1000-memory.dmp

                                                                                                                                                                      memory/7060-1463-0x0000028DD4A40000-0x0000028DD4A71000-memory.dmp