Overview

overview

8

Static

static

3

morphvox-v...06.exe

windows10-2004-x64

8

morphvox-v...06.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    94s
  • max time network
    151s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    12/07/2026, 01:48

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    morphvox-voice-changer-5.1.67-installer_IP7-C06.exe
  • Size 5.2MB
  • Sample260712-b8ajdad19t
  • SHA256 01e0a25d202d94ff2107e972f59ecf98901d605c9f821e1f7116f99993b546fe
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
adwarediscoveryinstallerpersistenceprivilege_escalationspywarestealer

Malware Config

Signatures

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 14 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 2 IoCs

    Inno Setup installer

    installer
  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 61 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 10 IoCs
  • Suspicious use of FindShellTrayWindow 35 IoCs
  • Suspicious use of SendNotifyMessage 18 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\morphvox-voice-changer-5.1.67-installer_IP7-C06.exe
    "C:\Users\Admin\AppData\Local\Temp\morphvox-voice-changer-5.1.67-installer_IP7-C06.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:1948
    • C:\Users\Admin\AppData\Local\Temp\is-V58NRA7P5S.tmp\morphvox-voice-changer-5.1.67-installer_IP7-C06.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-V58NRA7P5S.tmp\morphvox-voice-changer-5.1.67-installer_IP7-C06.tmp" /SL5="$400B2,4171849,960512,C:\Users\Admin\AppData\Local\Temp\morphvox-voice-changer-5.1.67-installer_IP7-C06.exe"
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Checks processor information in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:4164
      • C:\Users\Admin\AppData\Local\Temp\is-Y6S561G8TV.tmp\component0_extract\saBSI.exe
        "C:\Users\Admin\AppData\Local\Temp\is-Y6S561G8TV.tmp\component0_extract\saBSI.exe" /affid 91082 PaidDistribution=true CountryCode=GB InstallID=GnjW1demfslrUN8UoQjLNzduu3qZyPzOgZ8v7mBLeAQFygmk8Heiyujiqyns0lefXueUOTSwwWtGxF6OLfo
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:2900
        • C:\ProgramData\McAfee\WebAdvisor\saBSI\saBSI.exe
          "C:\ProgramData\McAfee\WebAdvisor\saBSI\saBSI.exe" /install /affid 91082 PaidDistribution=true InstallID=GnjW1demfslrUN8UoQjLNzduu3qZyPzOgZ8v7mBLeAQFygmk8Heiyujiqyns0lefXueUOTSwwWtGxF6OLfo saBsiVersion=4.1.1.865 CountryCode=GB /no_self_update
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of WriteProcessMemory
          PID:6060
          • C:\ProgramData\McAfee\WebAdvisor\saBSI\installer.exe
            "C:\ProgramData\McAfee\WebAdvisor\saBSI\\installer.exe" /setOem:Affid=91082 /s /thirdparty /upgrade
            5⤵
            • Executes dropped EXE
            • Drops file in Program Files directory
            • Suspicious use of WriteProcessMemory
            PID:1524
            • C:\Program Files\McAfee\Temp1322423183\installer.exe
              "C:\Program Files\McAfee\Temp1322423183\installer.exe" /setOem:Affid=91082 /s /thirdparty /upgrade
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Drops file in Program Files directory
              • Modifies registry class
              PID:3500
      • C:\Users\Admin\AppData\Local\Temp\is-Y6S561G8TV.tmp\component1_extract\OperaGXSetup.exe
        "C:\Users\Admin\AppData\Local\Temp\is-Y6S561G8TV.tmp\component1_extract\OperaGXSetup.exe" --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:operagx,utm.id:BjYV7wS2957hOk0wFpWnY8DxtUqd05iyKmmzbG4HGOD2v1d2Gpiax1CRV3QMUp4iVZI6srwlKaWWrXw
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:5264
        • C:\Users\Admin\AppData\Local\Temp\7zS094A4B39\setup.exe
          C:\Users\Admin\AppData\Local\Temp\7zS094A4B39\setup.exe --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:operagx,utm.id:BjYV7wS2957hOk0wFpWnY8DxtUqd05iyKmmzbG4HGOD2v1d2Gpiax1CRV3QMUp4iVZI6srwlKaWWrXw --server-tracking-blob=ZTlkNzM2OWE0ZmQ4NmRjMzMxY2ZkYzc3NDNiOGNjOWVlYzY4NTQ1ZWE3ZGI3MGQ3M2VjZjg1N2MzNmRmNjI5ZDp7ImNvdW50cnkiOiJVUyIsImVkaXRpb24iOiJzdGQtMiIsImluc3RhbGxlcl9uYW1lIjoiT3BlcmFHWFNldHVwLmV4ZSIsInByb2R1Y3QiOiJvcGVyYV9neCIsInF1ZXJ5IjoiL29wZXJhX2d4L3N0YWJsZS9lZGl0aW9uL3N0ZC0yIiwidGltZXN0YW1wIjoiMTc1Nzg0NzYzNS4zNjE1IiwidXNlcmFnZW50IjoicHl0aG9uLXJlcXVlc3RzLzIuMzIuMyIsInV0bSI6e30sInV1aWQiOiIyYjBlYWY3NC00NGQ4LTQ2NjktYWNiZC1lYzUzNmZmMzhhYzYifQ==
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Enumerates connected drives
          • Suspicious use of WriteProcessMemory
          PID:1756
          • C:\Users\Admin\AppData\Local\Temp\7zS094A4B39\setup.exe
            C:\Users\Admin\AppData\Local\Temp\7zS094A4B39\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=121.0.5600.81 --initial-client-data=0x29c,0x2a0,0x2a4,0x278,0x2a8,0x7ffe37f68ef0,0x7ffe37f68efc,0x7ffe37f68f08
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:4212
          • C:\Users\Admin\AppData\Local\Temp\.opera\98a28a55-8083-4a2a-b3b3-3d65bdc5a41a Opera GX Installer Temp\setup.exe
            "C:\Users\Admin\AppData\Local\Temp\.opera\98a28a55-8083-4a2a-b3b3-3d65bdc5a41a Opera GX Installer Temp\setup.exe" --version
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:3468
          • C:\Users\Admin\AppData\Local\Temp\7zS094A4B39\setup.exe
            "C:\Users\Admin\AppData\Local\Temp\7zS094A4B39\setup.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=1756 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\98a28a55-8083-4a2a-b3b3-3d65bdc5a41a Opera GX Installer Temp\opera_package_20260712024909" --session-guid=e196dc3b-750f-4179-8cf0-b324f264820a --server-tracking-blob="NGFiMWZjNTYwN2RhNTU5MWYxY2I5NGZhNDY1Mzc2M2FjN2U4N2U0NmE5MTRiNzI5ZGU2MjNjZDVkMWI1MDc2Yjp7ImNvdW50cnkiOiJVUyIsImVkaXRpb24iOiJzdGQtMiIsImluc3RhbGxlcl9uYW1lIjoiT3BlcmFHWFNldHVwLmV4ZSIsInByb2R1Y3QiOnsibmFtZSI6Im9wZXJhX2d4In0sInF1ZXJ5IjoiL29wZXJhX2d4L3N0YWJsZS9lZGl0aW9uL3N0ZC0yIiwic3lzdGVtIjp7InBsYXRmb3JtIjp7ImFyY2giOiJ4ODZfNjQiLCJvcHN5cyI6IldpbmRvd3MiLCJvcHN5cy12ZXJzaW9uIjoiMTEiLCJwYWNrYWdlIjoiRVhFIn19LCJ0aW1lc3RhbXAiOiIxNzU3ODQ3NjM1LjM2MTUiLCJ1c2VyYWdlbnQiOiJweXRob24tcmVxdWVzdHMvMi4zMi4zIiwidXRtIjp7ImNhbXBhaWduIjoib3BlcmFneCIsImlkIjoiQmpZVjd3UzI5NTdoT2swd0ZwV25ZOER4dFVxZDA1aXlLbW16Ykc0SEdPRDJ2MWQyR3BpYXgxQ1JWM1FNVXA0aVZaSTZzcndsS2FXV3JYdyIsIm1lZGl1bSI6ImFwYiIsInNvdXJjZSI6ImFpcyJ9LCJ1dWlkIjoiMmIwZWFmNzQtNDRkOC00NjY5LWFjYmQtZWM1MzZmZjM4YWM2In0= " --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=BC08000000000000
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Enumerates connected drives
            • Suspicious use of WriteProcessMemory
            PID:3184
            • C:\Users\Admin\AppData\Local\Temp\7zS094A4B39\setup.exe
              C:\Users\Admin\AppData\Local\Temp\7zS094A4B39\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=121.0.5600.81 --initial-client-data=0x2b8,0x2bc,0x2c0,0x284,0x2c4,0x7ffe36db8ef0,0x7ffe36db8efc,0x7ffe36db8f08
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:804
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\installer.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\installer.exe" --backend --initial-pid=1756 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\98a28a55-8083-4a2a-b3b3-3d65bdc5a41a Opera GX Installer Temp\opera_package_202607120249091" --session-guid=e196dc3b-750f-4179-8cf0-b324f264820a --server-tracking-blob="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 " --silent --desktopshortcut=1 --install-subfolder=133.0.5932.39
              6⤵
              • Executes dropped EXE
              • Enumerates connected drives
              • Enumerates system info in registry
              • Modifies registry class
              • Suspicious use of WriteProcessMemory
              PID:5572
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x2b0,0x2b4,0x2b8,0x28c,0x2bc,0x7ff7e0c9cd88,0x7ff7e0c9cd94,0x7ff7e0c9cda0
                7⤵
                • Executes dropped EXE
                PID:5592
              • C:\Users\Admin\AppData\Local\Temp\.opera\98a28a55-8083-4a2a-b3b3-3d65bdc5a41a Opera GX Installer Temp\opera_package_202607120249091\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\98a28a55-8083-4a2a-b3b3-3d65bdc5a41a Opera GX Installer Temp\opera_package_202607120249091\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Adds Run key to start application
                • System Location Discovery: System Language Discovery
                • Enumerates system info in registry
                • Modifies Internet Explorer settings
                • Suspicious use of WriteProcessMemory
                PID:4872
                • C:\Users\Admin\AppData\Local\Temp\.opera\98a28a55-8083-4a2a-b3b3-3d65bdc5a41a Opera GX Installer Temp\opera_package_202607120249091\assistant\assistant_installer.exe
                  "C:\Users\Admin\AppData\Local\Temp\.opera\98a28a55-8083-4a2a-b3b3-3d65bdc5a41a Opera GX Installer Temp\opera_package_202607120249091\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x250,0x254,0x258,0x22c,0x25c,0xd24b80,0xd24b8c,0xd24b98
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:4868
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Enumerates system info in registry
                  • Suspicious use of WriteProcessMemory
                  PID:1264
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x684b80,0x684b8c,0x684b98
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    PID:2964
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Enumerates system info in registry
                    • Suspicious use of FindShellTrayWindow
                    • Suspicious use of SendNotifyMessage
                    • Suspicious use of WriteProcessMemory
                    PID:5528
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:2104
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7ffe23d405a0,0x7ffe23d405b0,0x7ffe23d405c0
                        11⤵
                        • Executes dropped EXE
                        PID:6644
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:6740
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7ffe23d405a0,0x7ffe23d405b0,0x7ffe23d405c0
                        11⤵
                        • Executes dropped EXE
                        PID:6784
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x1328378,0x1328384,0x1328390
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Location Discovery: System Language Discovery
                      • Suspicious use of WriteProcessMemory
                      PID:5376
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                        11⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • Enumerates system info in registry
                        • Suspicious use of WriteProcessMemory
                        PID:3568
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x180,0x184,0x188,0x17c,0x18c,0x7ffe23d405a0,0x7ffe23d405b0,0x7ffe23d405c0
                          12⤵
                          • Executes dropped EXE
                          PID:712
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                        11⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • Enumerates system info in registry
                        • Suspicious use of WriteProcessMemory
                        PID:912
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7ffe23d405a0,0x7ffe23d405b0,0x7ffe23d405c0
                          12⤵
                          • Executes dropped EXE
                          PID:7132
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                        11⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • Enumerates system info in registry
                        • Suspicious use of WriteProcessMemory
                        PID:5476
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7ffe23d405a0,0x7ffe23d405b0,0x7ffe23d405c0
                          12⤵
                          • Executes dropped EXE
                          PID:5864
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Adds Run key to start application
                • Checks processor information in registry
                • Enumerates system info in registry
                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                • Suspicious use of AdjustPrivilegeToken
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of SendNotifyMessage
                • Suspicious use of WriteProcessMemory
                PID:2836
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7ffe23d405a0,0x7ffe23d405b0,0x7ffe23d405c0
                  8⤵
                  • Executes dropped EXE
                  PID:6492
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1892,i,449686935379841984,3245147878197839083,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2064 /prefetch:11
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Time Discovery
                  • Enumerates system info in registry
                  PID:3596
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1668,i,471514568121564618,7403254902200194158,262144 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1976 /prefetch:2
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  PID:5092
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2436,i,11123687119275762636,17626545551690965634,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2668 /prefetch:13
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  PID:4684
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3184,i,17449805464735888778,15588250978223320870,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3216 /prefetch:14
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  PID:5280
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3196,i,4882090381350277097,8167343244367437816,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3240 /prefetch:14
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  PID:4512
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3212,i,13042470877353091947,12358037041675605617,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3272 /prefetch:14
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  PID:5776
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3248,i,15441651840766396000,5594893263785965692,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3324 /prefetch:14
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  PID:5284
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3172,i,7003211702979664000,16679438251486305968,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3292 /prefetch:14
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  PID:2852
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3312,i,12516334799209916573,11441993199296631261,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3344 /prefetch:14
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  PID:4940
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3976,i,12578633746104963191,2814760389055206653,2097152 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3296 /prefetch:1
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  PID:6804
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_gx_splash.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
                  8⤵
                  • Executes dropped EXE
                  PID:4708
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4660,i,8122142692373224997,10233366486321973849,2097152 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4684 /prefetch:1
                  8⤵
                  • Executes dropped EXE
                  • Enumerates system info in registry
                  PID:1308
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4812,i,6972097848999309919,9623567690881688726,2097152 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4840 /prefetch:9
                  8⤵
                  • Executes dropped EXE
                  • Enumerates system info in registry
                  PID:1212
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4984,i,16202287397705635302,7276945762464275631,2097152 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4992 /prefetch:1
                  8⤵
                  • Executes dropped EXE
                  PID:4608
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5220,i,17009510888056997590,11553074372680502124,2097152 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5192 /prefetch:1
                  8⤵
                  • Executes dropped EXE
                  • Enumerates system info in registry
                  PID:7156
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5240,i,17580715575074398392,8835409555593487683,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5352 /prefetch:14
                  8⤵
                  • Executes dropped EXE
                  • Enumerates system info in registry
                  PID:7152
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5344,i,5568220690031498129,330579457448963601,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5356 /prefetch:14
                  8⤵
                  • Executes dropped EXE
                  • Enumerates system info in registry
                  PID:3096
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5340,i,6575027152377734960,16242378242678335046,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5460 /prefetch:14
                  8⤵
                  • Executes dropped EXE
                  • Enumerates system info in registry
                  PID:2624
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5348,i,7840977060603164878,17066173260600888772,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5464 /prefetch:14
                  8⤵
                  • Executes dropped EXE
                  • Enumerates system info in registry
                  PID:456
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5836,i,18124400038982300759,12210543301984555979,2097152 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5772 /prefetch:9
                  8⤵
                  • Executes dropped EXE
                  • Enumerates system info in registry
                  PID:1880
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6488,i,11440749204946829353,14700564906588663556,2097152 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6792 /prefetch:9
                  8⤵
                  • Executes dropped EXE
                  • Enumerates system info in registry
                  PID:7108
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=7032,i,9339431621151372804,2914538566702382588,2097152 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6980 /prefetch:9
                  8⤵
                    PID:5336
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6532,i,13085530613319542934,2772217380030724903,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=6500 /prefetch:12
                    8⤵
                    • Executes dropped EXE
                    • Enumerates system info in registry
                    PID:7960
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6572,i,2219624049705952796,205170584306300340,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=6160 /prefetch:14
                    8⤵
                    • Executes dropped EXE
                    • Enumerates system info in registry
                    PID:7988
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6552,i,8018698332576353603,8896342433417427568,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=5212 /prefetch:14
                    8⤵
                    • Executes dropped EXE
                    • Enumerates system info in registry
                    PID:8000
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7476,i,15699343729291603771,15075636084090822053,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7608 /prefetch:14
                    8⤵
                    • Enumerates system info in registry
                    PID:8012
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7748,i,10391531118226134067,3138880733510570198,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7764 /prefetch:14
                    8⤵
                    • Enumerates system info in registry
                    PID:8024
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7912,i,357680961167041683,8076341104897177304,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7776 /prefetch:14
                    8⤵
                    • Enumerates system info in registry
                    PID:8076
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7920,i,9766632120914837657,3349642063610459437,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=7932 /prefetch:14
                    8⤵
                    • Enumerates system info in registry
                    PID:8072
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=8216,i,3599904173148404828,5037484420567702418,2097152 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=8212 /prefetch:1
                    8⤵
                    • Enumerates system info in registry
                    PID:8128
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8360,i,16184525079064506663,18008565923385920660,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8372 /prefetch:14
                    8⤵
                    • Enumerates system info in registry
                    PID:8140
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8516,i,18380207501203419522,2614109818781952250,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8528 /prefetch:14
                    8⤵
                    • Enumerates system info in registry
                    PID:8152
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8540,i,10154720692163560710,13033592185141019858,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8676 /prefetch:14
                    8⤵
                    • Enumerates system info in registry
                    PID:8164
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8812,i,9987686816698788601,3391573215772315606,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8824 /prefetch:14
                    8⤵
                      PID:8176
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8960,i,15053706836274179461,13245989380239636335,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8972 /prefetch:14
                      8⤵
                      • Enumerates system info in registry
                      PID:8188
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=6492,i,15722676036517170322,9866794765965672538,2097152 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9128 /prefetch:9
                      8⤵
                      • Enumerates system info in registry
                      PID:5108
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9336,i,16494906238204968368,9091821199647123507,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9348 /prefetch:14
                      8⤵
                      • Enumerates system info in registry
                      PID:7504
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8204,i,3169548386376157265,7459277634775922436,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9368 /prefetch:14
                      8⤵
                        PID:7216
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
                        8⤵
                          PID:6052
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x2a0,0x2a4,0x2a8,0x27c,0x2ac,0x7ff7071d9860,0x7ff7071d986c,0x7ff7071d9878
                            9⤵
                              PID:7172
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3932,i,11815160011826358528,13892985298234117879,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10052 /prefetch:14
                            8⤵
                              PID:8564
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10212,i,17134294610904336035,16334253275742815195,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10196 /prefetch:14
                              8⤵
                                PID:8656
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10372,i,17829431685846127456,11842288691686377006,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10348 /prefetch:14
                                8⤵
                                  PID:8628
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=10388,i,6616348649985486266,4791049502737961723,2097152 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10500 /prefetch:1
                                  8⤵
                                    PID:7812
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10764,i,17029202810738156838,8890315965808665152,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10640 /prefetch:14
                                    8⤵
                                      PID:8272
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10644,i,4764649694533147617,15918746010611341705,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=10588 /prefetch:14
                                      8⤵
                                        PID:8400
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9456,i,8984697784716659360,11929303778160327979,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=5924 /prefetch:14
                                        8⤵
                                          PID:9144
                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8164,i,1775963042460316999,11678308146858873763,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=8140 /prefetch:14
                                          8⤵
                                            PID:7316
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8512,i,108657435728115235,14883269718150789737,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=8652 /prefetch:14
                                            8⤵
                                              PID:7360
                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8664,i,5677817490464352976,14515452450299598160,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=7720 /prefetch:14
                                              8⤵
                                                PID:7392
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8904,i,8191598440937616935,15429940785282741312,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=8892 /prefetch:14
                                                8⤵
                                                  PID:7924
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=8112,i,16507848592546805908,9825643481175200160,2097152 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=11304 /prefetch:9
                                                  8⤵
                                                    PID:1992
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11288,i,9621234556773226591,18271799846393282311,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=11396 /prefetch:14
                                                    8⤵
                                                      PID:5724
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=11576,i,17174330710143429864,9494351661226923259,2097152 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=11620 /prefetch:9
                                                      8⤵
                                                        PID:8908
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11544,i,4018999487290399076,14239387235350179973,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=11728 /prefetch:14
                                                        8⤵
                                                          PID:8940
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11868,i,4740386218833831624,13900996493817278195,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=11892 /prefetch:14
                                                          8⤵
                                                            PID:5548
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8856,i,13248774556309769013,110361129250771936,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=12040 /prefetch:14
                                                            8⤵
                                                              PID:9208
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=12192,i,1286210251974636675,6430693034973236954,2097152 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=12208 /prefetch:9
                                                              8⤵
                                                                PID:3976
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11872,i,1403521075844896926,7406132197650028751,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=12376 /prefetch:14
                                                                8⤵
                                                                  PID:6120
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12400,i,4028670363124131397,4182212654181869796,524288 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=11916 /prefetch:14
                                                                  8⤵
                                                                    PID:8504
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=7748,i,13982384062509814365,18350239881772252791,2097152 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=6752 /prefetch:9
                                                                    8⤵
                                                                      PID:8856
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=11160,i,753220663123328613,2748242075717954591,2097152 --field-trial-handle=1980,i,12148878634076555301,602981702552195150,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,8137517136359719450,11670572937990035349,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=12296 /prefetch:9
                                                                      8⤵
                                                                        PID:8620
                                                                • C:\Users\Admin\AppData\Local\Temp\.opera\98a28a55-8083-4a2a-b3b3-3d65bdc5a41a Opera GX Installer Temp\opera_package_202607120249091\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe
                                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\98a28a55-8083-4a2a-b3b3-3d65bdc5a41a Opera GX Installer Temp\opera_package_202607120249091\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe"
                                                                  5⤵
                                                                  • Executes dropped EXE
                                                                  • System Location Discovery: System Language Discovery
                                                                  PID:5152
                                                                • C:\Users\Admin\AppData\Local\Temp\.opera\98a28a55-8083-4a2a-b3b3-3d65bdc5a41a Opera GX Installer Temp\opera_package_202607120249091\assistant\assistant_installer.exe
                                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\98a28a55-8083-4a2a-b3b3-3d65bdc5a41a Opera GX Installer Temp\opera_package_202607120249091\assistant\assistant_installer.exe" --version
                                                                  5⤵
                                                                  • Executes dropped EXE
                                                                  • Loads dropped DLL
                                                                  • System Location Discovery: System Language Discovery
                                                                  • Enumerates system info in registry
                                                                  • Suspicious use of WriteProcessMemory
                                                                  PID:1164
                                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\98a28a55-8083-4a2a-b3b3-3d65bdc5a41a Opera GX Installer Temp\opera_package_202607120249091\assistant\assistant_installer.exe
                                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\98a28a55-8083-4a2a-b3b3-3d65bdc5a41a Opera GX Installer Temp\opera_package_202607120249091\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xd24b80,0xd24b8c,0xd24b98
                                                                    6⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • System Location Discovery: System Language Discovery
                                                                    PID:1072
                                                        • C:\Program Files\McAfee\WebAdvisor\servicehost.exe
                                                          "C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe"
                                                          1⤵
                                                          • Executes dropped EXE
                                                          PID:7108
                                                        • C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe
                                                          "C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe"
                                                          1⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • Drops file in Program Files directory
                                                          • Modifies data under HKEY_USERS
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:4120
                                                          • C:\Program Files\McAfee\WebAdvisor\UIHost.exe
                                                            "C:\Program Files\McAfee\WebAdvisor\UIHost.exe"
                                                            2⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            PID:5024
                                                          • C:\Program Files\McAfee\WebAdvisor\updater.exe
                                                            "C:\Program Files\McAfee\WebAdvisor\updater.exe"
                                                            2⤵
                                                            • Executes dropped EXE
                                                            • Modifies data under HKEY_USERS
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:3068
                                                            • C:\Windows\system32\cmd.exe
                                                              C:\Windows\system32\cmd.exe /c IF EXIST "C:\Program Files\McAfee\WebAdvisor\Download" ( DEL "C:\Program Files\McAfee\WebAdvisor\Download\*.bak" )
                                                              3⤵
                                                                PID:7048
                                                              • C:\Windows\system32\cmd.exe
                                                                C:\Windows\system32\cmd.exe /c DEL "C:\Program Files\McAfee\WebAdvisor\*.tmp"
                                                                3⤵
                                                                  PID:3536
                                                            • C:\Windows\system32\svchost.exe
                                                              C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                              1⤵
                                                                PID:6160
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart
                                                                1⤵
                                                                • Executes dropped EXE
                                                                • Enumerates system info in registry
                                                                • Suspicious use of WriteProcessMemory
                                                                PID:6036
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x17c,0x180,0x184,0x178,0x188,0x7ffe23d405a0,0x7ffe23d405b0,0x7ffe23d405c0
                                                                  2⤵
                                                                  • Executes dropped EXE
                                                                  PID:5232
                                                              • C:\Windows\system32\wbem\unsecapp.exe
                                                                C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                1⤵
                                                                  PID:6476
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
                                                                  1⤵
                                                                    PID:8552
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff7071d9860,0x7ff7071d986c,0x7ff7071d9878
                                                                      2⤵
                                                                        PID:8256
                                                                      • C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe
                                                                        "C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe" --version
                                                                        2⤵
                                                                          PID:6200

                                                                      Network

                                                                            MITRE ATT&CK Enterprise v16

                                                                            Reconnaissance

                                                                            Resource Development

                                                                            Initial Access

                                                                            Execution

                                                                            Persistence

                                                                            Boot or Logon Autostart Execution

                                                                            1
                                                                            T1547

                                                                            Registry Run Keys / Startup Folder

                                                                            1
                                                                            T1547.001

                                                                            Event Triggered Execution

                                                                            1
                                                                            T1546

                                                                            Component Object Model Hijacking

                                                                            1
                                                                            T1546.015

                                                                            Privilege Escalation

                                                                            Boot or Logon Autostart Execution

                                                                            1
                                                                            T1547

                                                                            Registry Run Keys / Startup Folder

                                                                            1
                                                                            T1547.001

                                                                            Event Triggered Execution

                                                                            1
                                                                            T1546

                                                                            Component Object Model Hijacking

                                                                            1
                                                                            T1546.015

                                                                            Defense Evasion

                                                                            Modify Registry

                                                                            2
                                                                            T1112

                                                                            Credential Access

                                                                            Credentials from Password Stores

                                                                            1
                                                                            T1555

                                                                            Credentials from Web Browsers

                                                                            1
                                                                            T1555.003

                                                                            Unsecured Credentials

                                                                            1
                                                                            T1552

                                                                            Credentials In Files

                                                                            1
                                                                            T1552.001

                                                                            Discovery

                                                                            Peripheral Device Discovery

                                                                            1
                                                                            T1120

                                                                            Query Registry

                                                                            5
                                                                            T1012

                                                                            System Information Discovery

                                                                            4
                                                                            T1082

                                                                            System Location Discovery

                                                                            1
                                                                            T1614

                                                                            System Language Discovery

                                                                            1
                                                                            T1614.001

                                                                            System Time Discovery

                                                                            1
                                                                            T1124

                                                                            Lateral Movement

                                                                            Collection

                                                                            Data from Local System

                                                                            1
                                                                            T1005

                                                                            Command and Control

                                                                            Exfiltration

                                                                            Impact

                                                                            Replay Monitor

                                                                            Loading Replay Monitor...

                                                                            Downloads

                                                                            analyticsmanager.cab
                                                                            • Path C:\Program Files\McAfee\Temp1322423183\analyticsmanager.cab
                                                                            • Size 2.8MB
                                                                            • SHA256 d082eca9dc14a19e851eeb4b27344cfb86a10af4ae369f95c316954e1ec1f4c7
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            analyticstelemetry.cab
                                                                            • Path C:\Program Files\McAfee\Temp1322423183\analyticstelemetry.cab
                                                                            • Size 66KB
                                                                            • SHA256 d13d1720a8953a8a7491f2995b078ccb6aebdf26a9cf4af54eeee7bd5d32e941
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            browserhost.cab
                                                                            • Path C:\Program Files\McAfee\Temp1322423183\browserhost.cab
                                                                            • Size 2.0MB
                                                                            • SHA256 17f2dfd6e153e3211ef01fa10f794be97afc82810ee2fe33b783c7897a92b81d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            browserplugin.cab
                                                                            • Path C:\Program Files\McAfee\Temp1322423183\browserplugin.cab
                                                                            • Size 4.8MB
                                                                            • SHA256 fb4b6403fab3cd7ba5901ad2c56a61d0ba009c8fc9c253b3a85fd41f128eb393
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            ds_invoker.cab
                                                                            • Path C:\Program Files\McAfee\Temp1322423183\ds_invoker.cab
                                                                            • Size 3.7MB
                                                                            • SHA256 2aa1cad2a353b4b50e57c18d049a274d61205461537a275bbef7454393afa4d3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            installer.exe
                                                                            • Path C:\Program Files\McAfee\Temp1322423183\installer.exe
                                                                            • Size 3.1MB
                                                                            • SHA256 8ab97e61de7f76f8a44a3759263600a4c89833586b6917aeffbd02e06bc891cc
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            l10n.cab
                                                                            • Path C:\Program Files\McAfee\Temp1322423183\l10n.cab
                                                                            • Size 226KB
                                                                            • SHA256 c059763a1416365f31cce2e15a1b047fdb26dea50723db752f18e0356655ebca
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            logicmodule.cab
                                                                            • Path C:\Program Files\McAfee\Temp1322423183\logicmodule.cab
                                                                            • Size 2.3MB
                                                                            • SHA256 c2c4b18658c1efb388b3847ecd9bdcb086b82f5c3b51096b0fde27bbaac0c13a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            logicscripts.cab
                                                                            • Path C:\Program Files\McAfee\Temp1322423183\logicscripts.cab
                                                                            • Size 68KB
                                                                            • SHA256 4a5ae098afb6d9665be5ddacaeb271f4680ac80518fabaf27016e567c9dcc0d1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            mfw-mwb.cab
                                                                            • Path C:\Program Files\McAfee\Temp1322423183\mfw-mwb.cab
                                                                            • Size 20KB
                                                                            • SHA256 8f89478dc6614d1020e22a7a37720851549a08ba1969c136234cc4111361fa70
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            mfw-nps.cab
                                                                            • Path C:\Program Files\McAfee\Temp1322423183\mfw-nps.cab
                                                                            • Size 22KB
                                                                            • SHA256 d990b001e68114cf7c5d31adaebcbccb8b0210e6a5699985e27c9984e95210b3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            mfw-webadvisor.cab
                                                                            • Path C:\Program Files\McAfee\Temp1322423183\mfw-webadvisor.cab
                                                                            • Size 701KB
                                                                            • SHA256 6528005933dcaba451bd60c2fbeb39f3e8a280e6a17ee030bd235df317b4a56c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            mfw.cab
                                                                            • Path C:\Program Files\McAfee\Temp1322423183\mfw.cab
                                                                            • Size 786KB
                                                                            • SHA256 1c73bc42ee0b439974a05e3c635cb6b901fbc34432d714e328f90b26cb27a984
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            resourcedll.cab
                                                                            • Path C:\Program Files\McAfee\Temp1322423183\resourcedll.cab
                                                                            • Size 37KB
                                                                            • SHA256 16cfea49ef5a6d963aa2c5289976aa0d81c7c65955ca071898d716858a03ffbc
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            servicehost.cab
                                                                            • Path C:\Program Files\McAfee\Temp1322423183\servicehost.cab
                                                                            • Size 331KB
                                                                            • SHA256 4eae6096e35cc1cc7d82b16d5f455e16e985794dcedf5343742dd572713926a7
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            settingmanager.cab
                                                                            • Path C:\Program Files\McAfee\Temp1322423183\settingmanager.cab
                                                                            • Size 818KB
                                                                            • SHA256 4655ea44d1e18fc75f50f61406330d6c33e43c121512cb8b909948bc6efe8705
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            taskmanager.cab
                                                                            • Path C:\Program Files\McAfee\Temp1322423183\taskmanager.cab
                                                                            • Size 3.7MB
                                                                            • SHA256 739fd841e011f54ef66186d42a4ae6e65459723d9326e24d5dcc57e3068801a9
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            uihost.cab
                                                                            • Path C:\Program Files\McAfee\Temp1322423183\uihost.cab
                                                                            • Size 399KB
                                                                            • SHA256 735bca069ad9c98fa10787ec008402eec3bc7a17aedd011404fec76933e71dff
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            uimanager.cab
                                                                            • Path C:\Program Files\McAfee\Temp1322423183\uimanager.cab
                                                                            • Size 4.8MB
                                                                            • SHA256 6f53488adf7cbfd7e784b0170fe0c971f51918719617847a0525a6a8a49bfdd2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            uninstaller.cab
                                                                            • Path C:\Program Files\McAfee\Temp1322423183\uninstaller.cab
                                                                            • Size 1.1MB
                                                                            • SHA256 7ec55f7397ee3346b6e624f1c316889ecf65390397ce020a374b4f1cf47148bd
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            updater.cab
                                                                            • Path C:\Program Files\McAfee\Temp1322423183\updater.cab
                                                                            • Size 999KB
                                                                            • SHA256 0d19cfcbf00a2c3c7913a77e696aff8573e9f2bdb2b9dc4a9b0e2d6441d836aa
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            webadvisor.cab
                                                                            • Path C:\Program Files\McAfee\Temp1322423183\webadvisor.cab
                                                                            • Size 11KB
                                                                            • SHA256 d2377fbbb8ee38ab139b3aad9e95546a78c44a78b646b59ca2c45c2ceec03833
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            wssdep.cab
                                                                            • Path C:\Program Files\McAfee\Temp1322423183\wssdep.cab
                                                                            • Size 575KB
                                                                            • SHA256 adb75fe8f8f474b38e1499ef53aaad1d56f72cb48c3b78bf21897cf12e258cc6
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            AnalyticsManager.dll
                                                                            • Path C:\Program Files\McAfee\WebAdvisor\AnalyticsManager.dll
                                                                            • Size 9.1MB
                                                                            • SHA256 ad472d4c99f5884af2fb15c7abdc78cd5305999e5d18ff98f38d68c7ba594cc4
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            dataConfig.cab
                                                                            • Path C:\Program Files\McAfee\WebAdvisor\Analytics\dataConfig.cab
                                                                            • Size 79KB
                                                                            • SHA256 953708c221f4508bf6dad28e4221d3dc1f0d8b5b3e23600c187acee3803a45f6
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            SettingManager.dll
                                                                            • Path C:\Program Files\McAfee\WebAdvisor\SettingManager.dll
                                                                            • Size 2.0MB
                                                                            • SHA256 215cbf16e52edce65a5435a624bfcb1601b0df3a35f3fd7db652183322480efe
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            TaskManager.dll
                                                                            • Path C:\Program Files\McAfee\WebAdvisor\TaskManager.dll
                                                                            • Size 7.4MB
                                                                            • SHA256 a4eb29f496c169afc7647379ff96a52c219e410ad2ab073d2e145f7c4641475c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            UIHost.exe
                                                                            • Path C:\Program Files\McAfee\WebAdvisor\UIHost.exe
                                                                            • Size 1.1MB
                                                                            • SHA256 f9afdb2e57883d54f15132ca2b403f2cff0bed95f0a99406da1bab2fa2be1e91
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            AnalyticsEventsConfig.luc
                                                                            • Path C:\Program Files\McAfee\WebAdvisor\analyticstelemetry\events\AnalyticsEventsConfig.luc
                                                                            • Size 12KB
                                                                            • SHA256 5ccfafb7f2f93c07c83cfd4ed624003e53e8c8dfc482d1ef4be64e25a84db143
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            AnalyticsTelemetryHandler.luc
                                                                            • Path C:\Program Files\McAfee\WebAdvisor\analyticstelemetry\events\AnalyticsTelemetryHandler.luc
                                                                            • Size 2KB
                                                                            • SHA256 7b2b11fa9299cc39415859d157b8f7ff8422a7be37bb2663d9f12d412af6bda8
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            class.luc
                                                                            • Path C:\Program Files\McAfee\WebAdvisor\mfw\core\class.luc
                                                                            • Size 656B
                                                                            • SHA256 7151e08f52ee2f12197ef167e425ecb8f71eae3dbce1d55050474aed801f36ee
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            dkjson.luc
                                                                            • Path C:\Program Files\McAfee\WebAdvisor\mfw\core\dkjson.luc
                                                                            • Size 9KB
                                                                            • SHA256 891a7b9d927bc4912aca3463ef788659330d154c6cd0ac854c183845d89b05d3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            logger.luc
                                                                            • Path C:\Program Files\McAfee\WebAdvisor\mfw\core\logger.luc
                                                                            • Size 699B
                                                                            • SHA256 dd4624972533c5a4fe3567465c84000e0437ecc57c86296f36141924936d71a5
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            servicehost.exe
                                                                            • Path C:\Program Files\McAfee\WebAdvisor\servicehost.exe
                                                                            • Size 947KB
                                                                            • SHA256 33e92f4795fe90989dc739bd645d970ed0345492e48756acef34cfe30fd1eeab
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            wssdep.dll
                                                                            • Path C:\Program Files\McAfee\WebAdvisor\x64\wssdep.dll
                                                                            • Size 785KB
                                                                            • SHA256 e81639145340ee162222bb469c459f2098c38844882fbe4016acf2e099e3a3dc
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            log_00200057003F001D0006.txt
                                                                            • Path C:\ProgramData\McAfee\WebAdvisor\LogicModule.dll\log_00200057003F001D0006.txt
                                                                            • Size 1KB
                                                                            • SHA256 d2c6ebe88b8f5954d6d3dab9d0df01e4fab0a3cb3e3f031eadd37ccc5ed2dce3
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            log_00200057003F001D0006.txt
                                                                            • Path C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt
                                                                            • Size 3KB
                                                                            • SHA256 1602a9fff82d27658b2502370e8b27cb9d83cb54880942450b45f5a7de9536c8
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            log_00200057003F001D0006.txt
                                                                            • Path C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt
                                                                            • Size 4KB
                                                                            • SHA256 aec851ed66a833d822a2ceb2ea23a38993fb2292f8e24abb27e61e246e9f8709
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            log_00200057003F001D0006.txt
                                                                            • Path C:\ProgramData\McAfee\WebAdvisor\UIManager.dll\log_00200057003F001D0006.txt
                                                                            • Size 1KB
                                                                            • SHA256 a7557d97a1a804626df25739844d62f2e775a8fcc3bee792c4ba2f7e5b290c1f
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            log_00200057003F001D0006.txt
                                                                            • Path C:\ProgramData\McAfee\WebAdvisor\saBSI.exe\log_00200057003F001D0006.txt
                                                                            • Size 570B
                                                                            • SHA256 4637772864db110338d450b89bd1841c4588cfdbf76477dbef335036e913174a
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            installer.exe
                                                                            • Path C:\ProgramData\McAfee\WebAdvisor\saBSI\installer.exe
                                                                            • Size 33.5MB
                                                                            • SHA256 000e31921a46aa4d198bb6d3ca6c695780ddd4a4aafe0a6909b072a27b056217
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            saBSI.exe
                                                                            • Path C:\ProgramData\McAfee\WebAdvisor\saBSI\saBSI.exe
                                                                            • Size 1.5MB
                                                                            • SHA256 5ec42b168f2541dbb413d6f87aa5569470a2b0c6c574c3e655242461a4524763
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            data_1
                                                                            • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\System Cache\Cache_Data\data_1
                                                                            • Size 264KB
                                                                            • SHA256 a2fc9fe0c3dd55eeb891eb6362af208e30f8acb91c149d162f0d06b68c5ebf8e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            9bce8e14-a071-4ec1-b21a-55b7eb21ca1b.tmp
                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\9bce8e14-a071-4ec1-b21a-55b7eb21ca1b.tmp
                                                                            • Size 1KB
                                                                            • SHA256 87f8ad28a6c2160b4c92b04bbfd1b7846dd27003ce4c64816f16ee543c498d59
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            Opera GX Browser.lnk
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\98a28a55-8083-4a2a-b3b3-3d65bdc5a41a Opera GX Installer Temp\opera_package_202607120249091\Opera GX Browser.lnk
                                                                            • Size 1KB
                                                                            • SHA256 db24b527d7a1d12233b849b4bdf43dbf0db54ad51084a92845a627a1f11fcfb3
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            additional_file0.tmp
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\98a28a55-8083-4a2a-b3b3-3d65bdc5a41a Opera GX Installer Temp\opera_package_202607120249091\additional_file0.tmp
                                                                            • Size 2.8MB
                                                                            • SHA256 0f50bda78a34e09ccfd5e33a7958de9eebe9863cc3d875e8b9c52dec3f3a9992
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            installer_prefs_include.json
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\98a28a55-8083-4a2a-b3b3-3d65bdc5a41a Opera GX Installer Temp\opera_package_202607120249091\installer_prefs_include.json
                                                                            • Size 258B
                                                                            • SHA256 5539a43c8fb72d8d699801c7e951cb2be5445f786f8445c21dfe1afb76bd5a2a
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            installer_prefs_include.json
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\98a28a55-8083-4a2a-b3b3-3d65bdc5a41a Opera GX Installer Temp\opera_package_202607120249091\installer_prefs_include.json
                                                                            • Size 273B
                                                                            • SHA256 ad8d4a78576a310e8b6e7443269c4f4400c7adb1cdde3b8c589075647495bc4e
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            installer_prefs_include.json
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\98a28a55-8083-4a2a-b3b3-3d65bdc5a41a Opera GX Installer Temp\opera_package_202607120249091\installer_prefs_include.json
                                                                            • Size 781B
                                                                            • SHA256 7a92298aa1d7240cad35163f174d0f06455c01780a90ffa9a5238e171483315a
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            033c1776-d2c7-459d-ae05-9b072f4306f5.tmp
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\033c1776-d2c7-459d-ae05-9b072f4306f5.tmp
                                                                            • Size 472KB
                                                                            • SHA256 4b9b79291aca9c45d54ae238655f41b7a0eecb0b80fb3d172cd0b1d75e712540
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            148c0181-7d94-4a22-8d6d-dbb99e4ec7bc.tmp
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\148c0181-7d94-4a22-8d6d-dbb99e4ec7bc.tmp
                                                                            • Size 14KB
                                                                            • SHA256 f1d24a67ce5aa49b3a6a207a0c49c636f0a5b4851ce493326c76a0b78eb7c545
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            setup.exe
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\7zS094A4B39\setup.exe
                                                                            • Size 8.1MB
                                                                            • SHA256 8be09d18795860b08ce3ee4f21c05b3205fba0541ac174cfae1a66d19b21b8ea
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            Opera_installer_2607120149082831756.dll
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\Opera_installer_2607120149082831756.dll
                                                                            • Size 7.5MB
                                                                            • SHA256 7cac08fa3fc954671ddbeeae0a9c6c44b31b1e47ee8cf0591f6ce4f012fc0b02
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            bba977c6-5cfb-44b4-b1d5-29e868cb4e3e.tmp
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\bba977c6-5cfb-44b4-b1d5-29e868cb4e3e.tmp
                                                                            • Size 2.6MB
                                                                            • SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            e192dba7-0d26-451c-90cc-814df74f7c44.tmp
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\e192dba7-0d26-451c-90cc-814df74f7c44.tmp
                                                                            • Size 4.2MB
                                                                            • SHA256 9527f8a88118af8921b40c59fee22654dbf169a96d6a8febd2d0bb83363b1b4a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            morphvox-voice-changer-5.1.67-installer_IP7-C06.tmp
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-V58NRA7P5S.tmp\morphvox-voice-changer-5.1.67-installer_IP7-C06.tmp
                                                                            • Size 4.3MB
                                                                            • SHA256 dcbab07aa57abc62b3c90ba58cbaa0bfb77d0bbed023203f4f00702a69eba9ec
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            OperaGX.png
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-Y6S561G8TV.tmp\OperaGX.png
                                                                            • Size 152KB
                                                                            • SHA256 2f116cdef55e05549d6f06913afe39a91b715b188e110188c7fbf7f5eb69b318
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            WebAdvisor.png
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-Y6S561G8TV.tmp\WebAdvisor.png
                                                                            • Size 46KB
                                                                            • SHA256 a6ecce54116936ca27d4be9797e32bf2f3cfc7e41519a23032992970fbd9d3ba
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            component0.zip
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-Y6S561G8TV.tmp\component0.zip
                                                                            • Size 515KB
                                                                            • SHA256 cc6f4faf4e8a9f4d2269d1d69a69ea326f789620fb98078cc98597f3cb998589
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            saBSI.exe
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-Y6S561G8TV.tmp\component0_extract\saBSI.exe
                                                                            • Size 1.1MB
                                                                            • SHA256 f5aa950381fbcea7d730aa794974ca9e3310384a95d6cf4d015fbdbd9797b3e4
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            component1.zip
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-Y6S561G8TV.tmp\component1.zip
                                                                            • Size 3.6MB
                                                                            • SHA256 52ea32c4123bc367fc61f6624d0ac7a3d677a7eb169687c3daa3d975fbea4a5b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            OperaGXSetup.exe
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-Y6S561G8TV.tmp\component1_extract\OperaGXSetup.exe
                                                                            • Size 3.6MB
                                                                            • SHA256 47e56b4975eeb5ed4c5f492046c069e735173c3d1b6f10a8f2dbeac5210a20a3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            mainlogo
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-Y6S561G8TV.tmp\mainlogo
                                                                            • Size 19KB
                                                                            • SHA256 dd704e26bc13f71e53a0fcb236b268383c9525e89e7b551f9fcebac006d6fffa
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            mwa6D08.tmp
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\mwa6D08.tmp
                                                                            • Size 135KB
                                                                            • SHA256 926061fc6a92079aa227cc2e426bd5b2130501422a95e6a8984f15f05dee2e70
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            mwa98FA.tmp
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\mwa98FA.tmp
                                                                            • Size 173KB
                                                                            • SHA256 6dd62d41da015e4a1486a8866fcb28ac1209a552be8313dbd63e821cb46811c8
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            Icon_Light_Neutral.png
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2836_584588749\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                            • Size 2KB
                                                                            • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            favicon_opera_one.png
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2836_887770628\CRX_INSTALL\favicon_opera_one.png
                                                                            • Size 2KB
                                                                            • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            3bbd31034b60e7fc.customDestinations-ms
                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3bbd31034b60e7fc.customDestinations-ms
                                                                            • Size 23KB
                                                                            • SHA256 23e64b3d38615cd7749358474b06c9ed8bfe120397201a8e2268cd978e664c65
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            3bbd31034b60e7fc.customDestinations-ms~RFe5a63dc.TMP
                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3bbd31034b60e7fc.customDestinations-ms~RFe5a63dc.TMP
                                                                            • Size 23KB
                                                                            • SHA256 75f9f087cea5573cece40fda77fa7e4a3d54fd3d5e51b580233ec29535e7b223
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            settings.dat
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                                                            • Size 40B
                                                                            • SHA256 61e3d79782206d12a61360ea4405623f6e66d9ef13443ac19edf79b5ed692b3c
                                                                            • MD5 SHA1 SHA512
                                                                            Submit Download

                                                                            0b3805e5-7330-4796-acc9-54ccad65b8a4.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\0b3805e5-7330-4796-acc9-54ccad65b8a4.tmp
                                                                            • Size 162KB
                                                                            • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            179f959e-ea48-44dc-b55c-8c00c24efa0b.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\179f959e-ea48-44dc-b55c-8c00c24efa0b.tmp
                                                                            • Size 412B
                                                                            • SHA256 6af623b2fb07f607acf60cbc48ad564874072c5d7ac52da312bcffb1b7e89c18
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            81cf6e41-4774-4bea-b6cb-8cc0693362e2.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\81cf6e41-4774-4bea-b6cb-8cc0693362e2.tmp
                                                                            • Size 171B
                                                                            • SHA256 fdd5936cb11e1e69f93af825400329d0b8ecc98aff0e513103489f50dc98421e
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            9296a89e-fa2c-48c9-80c0-c3008d57f086.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\9296a89e-fa2c-48c9-80c0-c3008d57f086.tmp
                                                                            • Size 12KB
                                                                            • SHA256 b9c453e4e9d3d9a3c4d3760902337b64514038f94ee5775f7dd79d21c02e1949
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            the-real-index
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                            • Size 48B
                                                                            • SHA256 731098be8683ea3dc54a7eaccb199366fd4c1d9a2df0418365b636b4f3fd9e29
                                                                            • MD5 SHA1 SHA512
                                                                            Submit Download

                                                                            the-real-index
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                            • Size 1008B
                                                                            • SHA256 ed9077917feb3165f53f3338d8915174ff70ce6351a0b50f21c9c149a612b9af
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            MANIFEST-000001
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\MANIFEST-000001
                                                                            • Size 41B
                                                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                            • MD5 SHA1 SHA512
                                                                            Submit Download

                                                                            messages.json
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\_locales\en\messages.json
                                                                            • Size 2KB
                                                                            • SHA256 57e2b257a65fa5e980c619214ed9ae25580bbd581143e28abac49928b31977a6
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            background.js
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\background.js
                                                                            • Size 17KB
                                                                            • SHA256 c7a162a7650887dffe12034ddbba5ddb91ca5bf4f5478f59ded324f7e088bacb
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            twitch16.png
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch16.png
                                                                            • Size 370B
                                                                            • SHA256 6534efc770a8a32c881258029c2f2b9d9f1b75228f53bf9b4cd2b9a9689884e0
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            twitch48.png
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch48.png
                                                                            • Size 921B
                                                                            • SHA256 47e37c0726206401cc69cb6ab0fdda79b364356a5e2fdbd5ce479bfbb965f245
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            cos-bridge.js
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-bridge.js
                                                                            • Size 173B
                                                                            • SHA256 0c4209fe6d13d432cc0035b20f1eb58159ed23bda2417c07f9e8fed079414025
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            cos-content.js
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-content.js
                                                                            • Size 502B
                                                                            • SHA256 e3b30cd7ca6d753dcf9fe91f9c1fb4eeae7b9dc00eebf87f5f24e2316b76390f
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            main.js
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\main.js
                                                                            • Size 47KB
                                                                            • SHA256 4c2cc909a2d1ca6b84270a6329e81f0f1de229ce49fd9412033a5c45e1d2e72f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            favicon_opera_one.png
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.49.0.1_0\favicon_opera_one.png
                                                                            • Size 2KB
                                                                            • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            reader_mode.js
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.49.0.1_0\reader_mode.js
                                                                            • Size 112KB
                                                                            • SHA256 2351bf9735cdb0eb1aeb738cf596ec80a063f47447c9cba68da963c644e7d0ea
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            service_worker.js
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.49.0.1_0\service_worker.js
                                                                            • Size 74KB
                                                                            • SHA256 1480798b974b29c617d9ebb4b4408f1eea9febbcde0083373cf8d178dca1b6cb
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            spotify_frame_interceptor.js
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.49.0.1_0\spotify_frame_interceptor.js
                                                                            • Size 5KB
                                                                            • SHA256 efc95edf1976955e0aaad47bd2e84951c0fb06f18f8b1c09646f0c950d60d4cd
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            background.js
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                                                                            • Size 86KB
                                                                            • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            Icon_Light_Neutral.png
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                                                                            • Size 2KB
                                                                            • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            popup.js.LICENSE.txt
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
                                                                            • Size 1KB
                                                                            • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            rules.json
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
                                                                            • Size 839B
                                                                            • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            MANIFEST-000001
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\chrome-extension_jifbgnmbgbdiedhdecealmlgmekpagde_0.indexeddb.leveldb\MANIFEST-000001
                                                                            • Size 23B
                                                                            • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                            • MD5 SHA1 SHA512
                                                                            Submit Download

                                                                            1e5d35b6-eebf-4265-9573-58c871e108c2.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\1e5d35b6-eebf-4265-9573-58c871e108c2.tmp
                                                                            • Size 27KB
                                                                            • SHA256 f5c9674ecba70bfabdfee3de3b5d3de36401afc3371ef013eeb204568b27d4a2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            5bd4ef26-83cf-4f50-8059-36133205483d.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\5bd4ef26-83cf-4f50-8059-36133205483d.tmp
                                                                            • Size 27KB
                                                                            • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            6a76f41e-7ed6-4cd0-9d64-187d2b347a38.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\6a76f41e-7ed6-4cd0-9d64-187d2b347a38.tmp
                                                                            • Size 27KB
                                                                            • SHA256 b79b047aa13202f575c92b513e67530ee9a5de4755d8d67c85c2f156c9a4eb39
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            887c7d91-3666-4b8f-9f05-19a2c6cc4175.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\887c7d91-3666-4b8f-9f05-19a2c6cc4175.tmp
                                                                            • Size 27KB
                                                                            • SHA256 2f1a860dec73e59307d1a8e1b1ace276076ef77008f468720569bfc8d7ba2512
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            ecf151a7-a4d7-4752-9443-0fc0b8a8782b.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\ecf151a7-a4d7-4752-9443-0fc0b8a8782b.tmp
                                                                            • Size 27KB
                                                                            • SHA256 cc914b6c8be70f233d533244b1fe41e32c495b9bb57901a96777f7d19fd75dfa
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            faecf084-078c-46c5-a740-0f451d48ddd8.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\faecf084-078c-46c5-a740-0f451d48ddd8.tmp
                                                                            • Size 27KB
                                                                            • SHA256 c5b282a24d9ef3ca8b9ec9a229d76f55e76c8765f3d55b13ae9d0f6501c7b0fd
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            Preferences
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                            • Size 12KB
                                                                            • SHA256 b30afe069a3dae0bf26a8a7849cdf61f09b1960bc7c4c543322c0a179a6f8f3e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            Secure Preferences
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
                                                                            • Size 116KB
                                                                            • SHA256 5d7a67bf379501cd6bc09f6454373161d66dd3eb39a7b1d91eb0791abff89a23
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            986bc497-a40a-4361-9943-ce271b65b964.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\986bc497-a40a-4361-9943-ce271b65b964.tmp
                                                                            • Size 72B
                                                                            • SHA256 833b74d851a9a60d6751b8443e7b2b105278bb21a0ba95bdb734e308f7ca90c4
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            the-real-index
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                            • Size 432B
                                                                            • SHA256 6ef371e65cf9a78a9db55075511fe25d8be35faf366a6ce2a40d9fac54a9bab8
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ad42a437-6b0d-4def-87a1-bc91f22b21f0.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\ad42a437-6b0d-4def-87a1-bc91f22b21f0.tmp
                                                                            • Size 11KB
                                                                            • SHA256 d2684e9ac84bbc4a0fcb3af4b538fb896f22c68e9f5ef941913360a48e598b5e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            e9310a66-403c-484f-bbe9-80481b273f60.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\e9310a66-403c-484f-bbe9-80481b273f60.tmp
                                                                            • Size 461B
                                                                            • SHA256 b99111a44d0667dfcd542b622f645278c1fd866faa7f0d2c39926887737b0139
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 11KB
                                                                            • SHA256 41b7773b53e4f90c972300bf568f994236108fbe021fc5eae248e263d7e661d9
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 11KB
                                                                            • SHA256 a960ce86c7f995c51c881f670a2cc28d868a6ab2ecbfe9b2eacfb3a83f533603
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 573B
                                                                            • SHA256 e77e04af62fb1ed4674e8aa1aa9bb2dc5ca08bc0b29facb4dde9f2daee9fbc8e
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 685B
                                                                            • SHA256 e2ac6cc276b28ffe05d151f527fcee744305ee3512b28832de23265d34e15f6a
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 8KB
                                                                            • SHA256 69a8450d623d505fc999b63ee42df3ec1961ab43ba2351e4586818d8e18ccc62
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 10KB
                                                                            • SHA256 b1b85f1551515c218a2e3d3d323e7779382dba340f44028dd4b478dbaadd0df3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 10KB
                                                                            • SHA256 d70955d72058c11e510bfd2b785b3a9bd344903df504623f2f1de1b0762e2807
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 7KB
                                                                            • SHA256 c956f0cca3452ed2b86b273523b579e02e9b7a6d6205c3d167d0460e7992b8fe
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 813B
                                                                            • SHA256 0a7cccb65c41f0dd6622b047cee3a2374b4c71d76ac23d1ab7098f3b6616deff
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 989B
                                                                            • SHA256 a1d57501c9696ce63bfdfb199f50dd954fcc62a342cb96f925296e7cf53663dd
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 1KB
                                                                            • SHA256 cb11b932c65e49766ca598d6abe021a2093f505e1dddfd60480536c93b86ab1c
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 1KB
                                                                            • SHA256 8e3ee2ac86a85bfd179a7effb7e33d6b5553755527ffbc41216d34b56f1c3f35
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 1KB
                                                                            • SHA256 8eec5d39d4174fd4ecbaaea9981def7cdd14d855699785446b14cf8f1682ee13
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 1KB
                                                                            • SHA256 353b9f5ded04cf3e36e615dd8f76bc696c90d46bd16ae21dfdde295fd2ecbe56
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 1KB
                                                                            • SHA256 7ed79a841aa93fd11486d4c03127ce0011c8fbbd2707cd42d5ab015911897fa8
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 1KB
                                                                            • SHA256 d1f1a8e92eb23d91832c4a6b2f57da35e0e1f29a49df4c8ffc51ca1c8eef3c49
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 1KB
                                                                            • SHA256 5be15f02b8a073b01157cef8003d05335a1226b4f0015fe38b473fe39d137c85
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 1KB
                                                                            • SHA256 d23965972f8e965827167758d0d84f8826c114e966da1958429495966044d444
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 1KB
                                                                            • SHA256 8751dc6a3ad1acfb73363b6ba7d082a6a4670ac55ed9691db59c44e7702fb580
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 2KB
                                                                            • SHA256 25eb831caad702788a97e50ff1022475ff62f0fc738ce9322d7e8752e029d612
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 2KB
                                                                            • SHA256 fc2c428b47007d19a9e64c74659f0ffd22d7cbbf66068800e7afe83ef5161094
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 2KB
                                                                            • SHA256 85c15b046a5bef01131864b57390dd59040e205bbc67d0c747a175c6ca50b296
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 2KB
                                                                            • SHA256 4fcf15c7f8eb22757cb38acdff8a2e518f1804d85518ff91a4f9b08d1cc52e62
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 2KB
                                                                            • SHA256 f8b8087f346cfd9501ded2433aa3fd7a69753d966497c1c158c31d5ce07c1194
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 7KB
                                                                            • SHA256 777a92e4b417f964aea7b87e0c4ab1af0f781bbdd02e75ad519b2865d7ccb6b9
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 8KB
                                                                            • SHA256 535f01e724210e7353030af725bfe29375ab07b18ed3575e486d1cd669487af8
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 9KB
                                                                            • SHA256 6ac11ee0da7da9ab0f935817cf364ef89a61ad47484dcd087b30d2b249eae781
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 9KB
                                                                            • SHA256 f9e9ffd11d3c8cf8070b9f186af03e61601f6f9c3ac95b646d93508327e4559f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 9KB
                                                                            • SHA256 8e33017087f8948a9d5bc5d6844a70ed17ee7528a5339d83b8cab6f42d843803
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 9KB
                                                                            • SHA256 57b14424c1cf2c2e4ab2a083732a8089d1ea074500b67463788e88448b8063ba
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 9KB
                                                                            • SHA256 40da8893adda82d01be7ceae919c533fc566d3bebc420b347920f67a5ceb0ed8
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 9KB
                                                                            • SHA256 6e9b546a5d2dcb08e216c02583dad137c44622c0a5411b1dd43447c154d916b4
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 9KB
                                                                            • SHA256 fc9c2d3e0b40a558ce1bdd211fdf9d2a245d027256c397ddb15492eef3c4bda2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 9KB
                                                                            • SHA256 ee8bc52739fa7680e8d8c6b6a6dd508be36921453b6411ac21dc9387e3421883
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 9KB
                                                                            • SHA256 589fcbaf07eac507ee584c54b6c41f43209f243eb41a936d1ca86b80b30774da
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 9KB
                                                                            • SHA256 10d53e7033cb40d88f3452d12f19297d74a909105faba502501dfecab9436921
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 9KB
                                                                            • SHA256 7f8e6d2ef8d590d88feda9b251f573d8e0eed2a056e5cb66b3134c1844aee390
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 9KB
                                                                            • SHA256 2dc20f721663572dfd2082fec51323d36594bb54be4106310b637c9b52987b90
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 9KB
                                                                            • SHA256 560078851f396eee7c4007a5e1bafa6411cddcbc168299b16a6c64eeb42bd0a5
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 9KB
                                                                            • SHA256 8ac93fe80ef5d0653339dd9e31ed3fae8595e69193adc2b7a94499700c10103d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 9KB
                                                                            • SHA256 7cb61203a1ed961088a2e4f895673963238c3793d485fca38257e19193260e08
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 9KB
                                                                            • SHA256 d94583433a069afa0ec6cf42d64c9bd479f40f915e3ef762a402165c305feb05
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 10KB
                                                                            • SHA256 76563d426bb4ea262819f584fdbea61e070aa398cbbc0ba009ad196e4e8fa137
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 10KB
                                                                            • SHA256 c0a280e5f8868c5b36ca633416773c1e938ec5f486b1a0285dbf567e28027fdf
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 10KB
                                                                            • SHA256 8040cdffed1654ebaf6e28a073a0b14e2a5a071d0a57ae7dac6c991239defe70
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 10KB
                                                                            • SHA256 4b1bed04e9239cd88aefc4d90fe7e12d7173082742316ce33d2f0429d5504988
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 11KB
                                                                            • SHA256 9c022d160a4486a7ebdac00928c9057ac28d835c63049d2f11ed4966dea1f829
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 11KB
                                                                            • SHA256 24ed0be28e712bab2beb122e2e7c18677627cf86bc3a1116cbc69e61058cac38
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 7KB
                                                                            • SHA256 67496d4367930e2e8cd37c2bf5eb19a8b535ad27ff7aed4715daa660f66af49a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 10KB
                                                                            • SHA256 3646bd1bebe06fe8c103d5ddbaa567b66308f750da92be6af14173645bdba298
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 9KB
                                                                            • SHA256 ccb588838cc37314f4ee548df32bea1797afd0f70e0ca483909b3a6978522d72
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 9KB
                                                                            • SHA256 642a57263e1f09e36c9afcd58751eeed71ad3f05948905acd4efb2b416283ce1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 9KB
                                                                            • SHA256 39a878287483502ef7c1e0f2ec89f43852979114c805e703958c7e3da12f0b82
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 10KB
                                                                            • SHA256 cdd61eeee91d78d39337417aa93e9ab07aa24b021c48543ac5005f4b47b962bd
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 10KB
                                                                            • SHA256 ad4fd845cbb6a75863d09d06e2c5bc5f6f419a8bc21ccb4e244acbcbc58b83ed
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 10KB
                                                                            • SHA256 5e02eb749d6f114561682fa31b2cc93cb4af71ead9e8bd393b60fa6acf6b2de1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 10KB
                                                                            • SHA256 0075f667cce381cdc9a38076af5057a9d221db6752ba445f6f35030a7aef2bab
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 11KB
                                                                            • SHA256 647dd36d2e13dfeeee81dae1b600c2d9d43784d3f409a3bb4ce2fafce02bb88a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 11KB
                                                                            • SHA256 af64c75bf18045860ae02c74d68592cfd06b10ba05c2d9540007f493f98a1a21
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 7KB
                                                                            • SHA256 f2eed5609d8fb6ca5861e9cd3fdfb6ffeb66a2d9d87e682fbd85221e13ef1223
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 10KB
                                                                            • SHA256 e4999eb31eed25452dd2476477021d723b025ee58e0dace220eecf1b54db2fbb
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 9KB
                                                                            • SHA256 09306febe319d33481f0c61e151845f9683712a44a1670ffb480bd11df3bcd98
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_ee93b206-5163-432b-a6fc-2c21840087dd.raw
                                                                            • Size 11KB
                                                                            • SHA256 54026684cac13bc373549771681ee487b2ce69510f9a4c5e110feae1f36ab616
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            CURRENT
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Sync Data\LevelDB\CURRENT
                                                                            • Size 16B
                                                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                            • MD5 SHA1 SHA512
                                                                            Submit Download

                                                                            cfbabb3f-0914-415c-8f43-21215124e28f.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\cfbabb3f-0914-415c-8f43-21215124e28f.tmp
                                                                            • Size 85KB
                                                                            • SHA256 f6290611a1acc42628ba6dc531c261279a82d901fc883a13ba5462771e667812
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            ssdfp2836.0.1609003070
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.0.1609003070
                                                                            • Size 1KB
                                                                            • SHA256 c71a74e1109e70232acba2e792c74290428e68cbdcd11a76d871c71d706a412c
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.0.1609003070
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.0.1609003070
                                                                            • Size 1KB
                                                                            • SHA256 faa80e1155e6d0b9554a5416b60d8df1da5006b3d2def2147b7ef34af7ee4a32
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.0.1609003070
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.0.1609003070
                                                                            • Size 505B
                                                                            • SHA256 3acf0a30540be5f786004ecbe8e33d8801cdac7182c98f66d1cd1c515268294e
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.0.1609003070
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.0.1609003070
                                                                            • Size 597B
                                                                            • SHA256 4ab616afeef9b6bf67ed843d6916981ecdc929ea766df0a5bed44cf972fe8b76
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.0.1609003070
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.0.1609003070
                                                                            • Size 690B
                                                                            • SHA256 1ed849e84de45d0d60f9364498984489792af15cd1f1c561e694d8a450a573bc
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.0.1609003070
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.0.1609003070
                                                                            • Size 779B
                                                                            • SHA256 dbdf01dff8e75beb164eb15c69806764dfd8933332b40a4928397bc23caa7692
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.0.1609003070
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.0.1609003070
                                                                            • Size 870B
                                                                            • SHA256 2b378171db64837b477cd131621581769979ceb26905626cfabe2506cd2a7a23
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.0.1609003070
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.0.1609003070
                                                                            • Size 970B
                                                                            • SHA256 4b20dac1198e7c788e4d456cb797d73604f40fba84c2e7024339d01611ff70c0
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.0.1609003070
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.0.1609003070
                                                                            • Size 1KB
                                                                            • SHA256 e6a7df78d39dcbed86e4b664fb5b185c675517ca49dd40f0ee1225a7c8776704
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.0.1609003070
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.0.1609003070
                                                                            • Size 1KB
                                                                            • SHA256 4a85d1aa6cac2ec9b243af66d4c1a59f2942d11baa8591c1596b9162cb58d433
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.0.1609003070
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.0.1609003070
                                                                            • Size 1KB
                                                                            • SHA256 c5fd9737b43b7607d0b1e5f3f03d0bf9039a871866cc342ef0a47ed26ed94758
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.0.1609003070
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.0.1609003070
                                                                            • Size 3KB
                                                                            • SHA256 7404c74f983151fbfb8107b2dff6928be0b928cc1afc18ee5cd77df315aa4d5c
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.0.1609003070
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.0.1609003070
                                                                            • Size 3KB
                                                                            • SHA256 6a2fd094359df49e77403f670e772c6a19c7902c20a42ec01f9779693b9f8595
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.0.1609003070
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.0.1609003070
                                                                            • Size 3KB
                                                                            • SHA256 091fe035e87441709549e7f207a565bac2f23c926364910e15f5a9b32d132e9f
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.0.1609003070
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.0.1609003070
                                                                            • Size 1KB
                                                                            • SHA256 dd57c2de29dd2df105b434ff2a639fc7321ee750f46fe9eeb992ccb7d4a16952
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.0.1609003070
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.0.1609003070
                                                                            • Size 1KB
                                                                            • SHA256 15ac757b26a4b0c83374b049301358a35d591e07942a630bf7674461d5add8ed
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.0.1609003070
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.0.1609003070
                                                                            • Size 2KB
                                                                            • SHA256 da81eae1e67e9c1db3dc8ac16d6e9ee222d4e1cfaa284261c59ca4c66575a024
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.0.1609003070
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.0.1609003070
                                                                            • Size 2KB
                                                                            • SHA256 57c98fc0452a52eeda7d018f2f9a605ccb6596328b0aafb4ed568e14170770ab
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.0.1609003070
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.0.1609003070
                                                                            • Size 3KB
                                                                            • SHA256 1257b3dc77058c008320a1bb0d068988323c5cf508f59ef0ca9c7841993c7909
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.0.1609003070
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.0.1609003070
                                                                            • Size 3KB
                                                                            • SHA256 22ab11836f031b49bac6a8a26f1d8ff17103e194137859aa8f7e8ff60fcea87b
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.0.1609003070
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.0.1609003070
                                                                            • Size 2KB
                                                                            • SHA256 3727ccb7efb1f2c1b59e2feed662129f118ad79c8e784c764a8da96a0d790283
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.0.1609003070
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.0.1609003070
                                                                            • Size 2KB
                                                                            • SHA256 5764f98d0102334034c0b187a098ae0cd5af9effc11c3254152cf1740c7f1bbd
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.1.1011869427
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.1.1011869427
                                                                            • Size 200B
                                                                            • SHA256 4b247281c861f7ae736454c22a277c6f927d40370d0bf5e93b5f5a8108329ca7
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.1.1011869427
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.1.1011869427
                                                                            • Size 224B
                                                                            • SHA256 83bb1f6ce2e3671959fa5cf23988e6b3eb566e61393db5ce5543e036ce13b53a
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp2836.1.1011869427
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2836.1.1011869427
                                                                            • Size 224B
                                                                            • SHA256 dfc8c4aa6294bb5c61b62382eb866622c1a3cd8a04bd3014b76cf8c5c3d91093
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            data_0
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_0
                                                                            • Size 8KB
                                                                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                            Submit Download

                                                                            data_2
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_2
                                                                            • Size 8KB
                                                                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                            Submit Download

                                                                            data_3
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_3
                                                                            • Size 8KB
                                                                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                            Submit Download

                                                                            memory/1948-1-0x0000000000330000-0x0000000000429000-memory.dmp
                                                                            Download

                                                                            memory/1948-10-0x0000000000330000-0x0000000000429000-memory.dmp
                                                                            Download

                                                                            memory/3500-385-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-371-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-390-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-389-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-388-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-392-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-395-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-397-0x00007FF63C4D0000-0x00007FF63C4E0000-memory.dmp
                                                                            Download

                                                                            memory/3500-465-0x00007FF65A300000-0x00007FF65A310000-memory.dmp
                                                                            Download

                                                                            memory/3500-387-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-549-0x00007FF6A70D0000-0x00007FF6A70E0000-memory.dmp
                                                                            Download

                                                                            memory/3500-386-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-517-0x00007FF655D40000-0x00007FF655D50000-memory.dmp
                                                                            Download

                                                                            memory/3500-384-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-403-0x00007FF6A70D0000-0x00007FF6A70E0000-memory.dmp
                                                                            Download

                                                                            memory/3500-433-0x00007FF6640F0000-0x00007FF664100000-memory.dmp
                                                                            Download

                                                                            memory/3500-551-0x00007FF6A70D0000-0x00007FF6A70E0000-memory.dmp
                                                                            Download

                                                                            memory/3500-564-0x00007FF6A70D0000-0x00007FF6A70E0000-memory.dmp
                                                                            Download

                                                                            memory/3500-435-0x00007FF6640F0000-0x00007FF664100000-memory.dmp
                                                                            Download

                                                                            memory/3500-437-0x00007FF6640F0000-0x00007FF664100000-memory.dmp
                                                                            Download

                                                                            memory/3500-503-0x00007FF6517D0000-0x00007FF6517E0000-memory.dmp
                                                                            Download

                                                                            memory/3500-442-0x00007FF6640F0000-0x00007FF664100000-memory.dmp
                                                                            Download

                                                                            memory/3500-569-0x00007FF6A70D0000-0x00007FF6A70E0000-memory.dmp
                                                                            Download

                                                                            memory/3500-448-0x00007FF6640F0000-0x00007FF664100000-memory.dmp
                                                                            Download

                                                                            memory/3500-571-0x00007FF6A70D0000-0x00007FF6A70E0000-memory.dmp
                                                                            Download

                                                                            memory/3500-573-0x00007FF6A70D0000-0x00007FF6A70E0000-memory.dmp
                                                                            Download

                                                                            memory/3500-583-0x00007FF6A70D0000-0x00007FF6A70E0000-memory.dmp
                                                                            Download

                                                                            memory/3500-565-0x00007FF6A70D0000-0x00007FF6A70E0000-memory.dmp
                                                                            Download

                                                                            memory/3500-466-0x00007FF68D4A0000-0x00007FF68D4B0000-memory.dmp
                                                                            Download

                                                                            memory/3500-431-0x00007FF6640F0000-0x00007FF664100000-memory.dmp
                                                                            Download

                                                                            memory/3500-414-0x00007FF6640F0000-0x00007FF664100000-memory.dmp
                                                                            Download

                                                                            memory/3500-393-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-394-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-377-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-370-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-391-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-368-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-362-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-366-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-364-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-356-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-358-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-359-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-353-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-458-0x00007FF6A24E0000-0x00007FF6A24F0000-memory.dmp
                                                                            Download

                                                                            memory/3500-351-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-348-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-461-0x00007FF6931D0000-0x00007FF6931E0000-memory.dmp
                                                                            Download

                                                                            memory/3500-349-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-350-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-477-0x00007FF69F880000-0x00007FF69F890000-memory.dmp
                                                                            Download

                                                                            memory/3500-497-0x00007FF69F880000-0x00007FF69F890000-memory.dmp
                                                                            Download

                                                                            memory/3500-396-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/3500-382-0x00007FF65D310000-0x00007FF65D320000-memory.dmp
                                                                            Download

                                                                            memory/4164-29-0x0000000006590000-0x00000000066D0000-memory.dmp
                                                                            Download

                                                                            memory/4164-28-0x0000000006590000-0x00000000066D0000-memory.dmp
                                                                            Download

                                                                            memory/4164-38-0x0000000006590000-0x00000000066D0000-memory.dmp
                                                                            Download

                                                                            memory/4164-37-0x0000000006590000-0x00000000066D0000-memory.dmp
                                                                            Download

                                                                            memory/4164-36-0x0000000006590000-0x00000000066D0000-memory.dmp
                                                                            Download

                                                                            memory/4164-31-0x0000000000940000-0x0000000000D93000-memory.dmp
                                                                            Download

                                                                            memory/4164-44-0x0000000000940000-0x0000000000D93000-memory.dmp
                                                                            Download

                                                                            memory/4164-131-0x0000000006590000-0x00000000066D0000-memory.dmp
                                                                            Download

                                                                            memory/4164-72-0x0000000006590000-0x00000000066D0000-memory.dmp
                                                                            Download

                                                                            memory/4164-32-0x0000000006590000-0x00000000066D0000-memory.dmp
                                                                            Download

                                                                            memory/4164-23-0x0000000006590000-0x00000000066D0000-memory.dmp
                                                                            Download

                                                                            memory/4164-22-0x0000000006590000-0x00000000066D0000-memory.dmp
                                                                            Download

                                                                            memory/4164-11-0x0000000000940000-0x0000000000D93000-memory.dmp
                                                                            Download

                                                                            memory/4164-186-0x0000000000940000-0x0000000000D93000-memory.dmp
                                                                            Download

                                                                            memory/4164-12-0x00000000018E0000-0x00000000018E1000-memory.dmp
                                                                            Download

                                                                            memory/4164-6-0x00000000018E0000-0x00000000018E1000-memory.dmp
                                                                            Download