Overview

overview

6

Static

static

1

OperaInstaller.exe

windows10-2004-x64

6

OperaInstaller.exe

windows11-ltsc_2024-x64

6

Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    147s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260706-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/07/2026, 11:53

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaInstaller.exe
  • Size 178KB
  • Sample260708-n2fs2ae151
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
adwarediscoverypersistenceprivilege_escalationspywarestealer

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 4 IoCs
    persistence
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Windows directory 15 IoCs
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • System Location Discovery: System Language Discovery 1 TTPs 14 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 7 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 56 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 21 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs
  • Suspicious use of SetWindowsHookEx 27 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:6084
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:5804
      • C:\Users\Admin\AppData\Local\Temp\7zSCA6C4559\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zSCA6C4559\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
        3⤵
        • Enumerates connected drives
        • Executes dropped EXE
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:5060
        • C:\Users\Admin\AppData\Local\Temp\7zSCA6C4559\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zSCA6C4559\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x2bc,0x2c0,0x2c4,0x288,0x2c8,0x7ff68d39ad88,0x7ff68d39ad94,0x7ff68d39ada0
          4⤵
          • Executes dropped EXE
          PID:5888
        • C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:1880
        • C:\Users\Admin\AppData\Local\Temp\7zSCA6C4559\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zSCA6C4559\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=5060 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\opera_package_20260708125335" --session-guid=c7e33952-b764-4755-86f8-c3a3640ee428 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=FC07000000000000
          4⤵
          • Enumerates connected drives
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:1396
          • C:\Users\Admin\AppData\Local\Temp\7zSCA6C4559\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zSCA6C4559\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff68d39ad88,0x7ff68d39ad94,0x7ff68d39ada0
            5⤵
            • Executes dropped EXE
            PID:1524
          • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe" --backend --initial-pid=5060 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\opera_package_202607081253351" --session-guid=c7e33952-b764-4755-86f8-c3a3640ee428 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=133.0.5932.24
            5⤵
            • Enumerates connected drives
            • Executes dropped EXE
            • Enumerates system info in registry
            • Modifies registry class
            • Suspicious use of WriteProcessMemory
            PID:4764
            • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff62292ad88,0x7ff62292ad94,0x7ff62292ada0
              6⤵
              • Executes dropped EXE
              PID:6120
            • C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\opera_package_202607081253351\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\opera_package_202607081253351\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Adds Run key to start application
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Enumerates system info in registry
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:3560
              • C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\opera_package_202607081253351\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\opera_package_202607081253351\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xad4040,0xad404c,0xad4058
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:5040
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:5836
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x6a4040,0x6a404c,0x6a4058
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:4920
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:3396
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:4024
                    • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x98,0xa8,0xac,0x9c,0xb0,0x7ffc92044fe0,0x7ffc92044ff0,0x7ffc92045000
                      10⤵
                      • Executes dropped EXE
                      PID:2636
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:2912
                    • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffc92044fe0,0x7ffc92044ff0,0x7ffc92045000
                      10⤵
                      • Executes dropped EXE
                      PID:364
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x2b8,0x2bc,0x2c0,0x2a0,0x25c,0x75c830,0x75c83c,0x75c848
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:3916
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:3968
                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffc92044fe0,0x7ffc92044ff0,0x7ffc92045000
                        11⤵
                        • Executes dropped EXE
                        PID:4196
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:2456
                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffc92044fe0,0x7ffc92044ff0,0x7ffc92045000
                        11⤵
                        • Executes dropped EXE
                        PID:6128
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:3556
                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffc92044fe0,0x7ffc92044ff0,0x7ffc92045000
                        11⤵
                        • Executes dropped EXE
                        PID:1180
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\opera_package_202607081253351\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Adds Run key to start application
              • Drops file in Windows directory
              • Executes dropped EXE
              • Loads dropped DLL
              • Checks processor information in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:2584
              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffc92044fe0,0x7ffc92044ff0,0x7ffc92045000
                7⤵
                • Executes dropped EXE
                PID:4896
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,5586636595981497146,4981781375065475373,262144 --field-trial-handle=2084,i,9609945701765594542,2387363566935062407,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,17478834783922618050,16279621628230971497,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2080 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:1412
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1896,i,11525909319824376983,10530867044225612236,524288 --field-trial-handle=2084,i,9609945701765594542,2387363566935062407,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,17478834783922618050,16279621628230971497,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2136 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Time Discovery
                PID:5952
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2480,i,2487906432421764546,17911254118854289135,524288 --field-trial-handle=2084,i,9609945701765594542,2387363566935062407,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,17478834783922618050,16279621628230971497,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2604 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:1344
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3468,i,10326962909681130401,16706278683277371628,2097152 --field-trial-handle=2084,i,9609945701765594542,2387363566935062407,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,17478834783922618050,16279621628230971497,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3480 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6140
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4228,i,3878976210473533734,9217074968724371163,2097152 --field-trial-handle=2084,i,9609945701765594542,2387363566935062407,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,17478834783922618050,16279621628230971497,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4292 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:3504
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4216,i,20371392793027403,3007992461010875146,524288 --field-trial-handle=2084,i,9609945701765594542,2387363566935062407,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,17478834783922618050,16279621628230971497,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4272 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4632
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4332,i,13825612329985668293,682126797726893059,2097152 --field-trial-handle=2084,i,9609945701765594542,2387363566935062407,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,17478834783922618050,16279621628230971497,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4636 /prefetch:9
                7⤵
                • Executes dropped EXE
                PID:4672
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4848,i,2636430822819819615,4353574413605057510,524288 --field-trial-handle=2084,i,9609945701765594542,2387363566935062407,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,17478834783922618050,16279621628230971497,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3204 /prefetch:12
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:2060
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5004,i,17098690221245483022,17887413771140189369,524288 --field-trial-handle=2084,i,9609945701765594542,2387363566935062407,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,17478834783922618050,16279621628230971497,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5016 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:2256
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2052,i,13100189849138829523,6895825026640557419,524288 --field-trial-handle=2084,i,9609945701765594542,2387363566935062407,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,17478834783922618050,16279621628230971497,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=1972 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6900
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5660,i,9259259397799281469,646572795995691485,2097152 --field-trial-handle=2084,i,9609945701765594542,2387363566935062407,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,17478834783922618050,16279621628230971497,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=5664 /prefetch:1
                7⤵
                • Executes dropped EXE
                PID:6388
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\opera_package_202607081253351\additional_file2.tmp"
              6⤵
              • Adds Run key to start application
              • Drops file in Windows directory
              • Executes dropped EXE
              • Checks processor information in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:6892
              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ffc92044fe0,0x7ffc92044ff0,0x7ffc92045000
                7⤵
                • Executes dropped EXE
                PID:6308
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1952,i,8379086457514175260,13381390286547261679,524288 --field-trial-handle=2040,i,5203923711197659137,10693777660852377062,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14655658652787726603,6553725287590296338,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2080 /prefetch:11
                7⤵
                • Executes dropped EXE
                • System Time Discovery
                • Enumerates system info in registry
                PID:6932
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,2964258836143020495,5518804786783847084,262144 --field-trial-handle=2040,i,5203923711197659137,10693777660852377062,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14655658652787726603,6553725287590296338,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2036 /prefetch:2
                7⤵
                • Executes dropped EXE
                PID:6904
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2496,i,15728231263335117569,17989716396755315688,524288 --field-trial-handle=2040,i,5203923711197659137,10693777660852377062,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14655658652787726603,6553725287590296338,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2512 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6192
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3784,i,8373272313651798227,12037791248190691676,2097152 --field-trial-handle=2040,i,5203923711197659137,10693777660852377062,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14655658652787726603,6553725287590296338,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3248 /prefetch:9
                7⤵
                • Executes dropped EXE
                PID:6340
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3928,i,1753316222167262822,7441248402426445610,2097152 --field-trial-handle=2040,i,5203923711197659137,10693777660852377062,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14655658652787726603,6553725287590296338,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4004 /prefetch:9
                7⤵
                • Executes dropped EXE
                PID:6532
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4068,i,2016069613357894943,5344286326390132513,524288 --field-trial-handle=2040,i,5203923711197659137,10693777660852377062,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14655658652787726603,6553725287590296338,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4076 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:6496
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4336,i,3014642937147970678,1816205430187215180,2097152 --field-trial-handle=2040,i,5203923711197659137,10693777660852377062,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14655658652787726603,6553725287590296338,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4368 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:2880
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4928,i,375327619396318868,6231885863977995575,524288 --field-trial-handle=2040,i,5203923711197659137,10693777660852377062,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14655658652787726603,6553725287590296338,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4932 /prefetch:12
                7⤵
                • Executes dropped EXE
                PID:5316
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5124,i,3604670841914657870,1171506378691372662,524288 --field-trial-handle=2040,i,5203923711197659137,10693777660852377062,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14655658652787726603,6553725287590296338,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5148 /prefetch:14
                7⤵
                • Enumerates system info in registry
                PID:2640
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5284,i,2942848477790511345,8658641975953263631,524288 --field-trial-handle=2040,i,5203923711197659137,10693777660852377062,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14655658652787726603,6553725287590296338,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5128 /prefetch:14
                7⤵
                • Enumerates system info in registry
                PID:3300
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
              6⤵
              • Adds Run key to start application
              • Drops file in Windows directory
              • Checks processor information in registry
              • Enumerates system info in registry
              • Modifies registry class
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of SetWindowsHookEx
              PID:5216
              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ffc92044fe0,0x7ffc92044ff0,0x7ffc92045000
                7⤵
                  PID:7148
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1928,i,5825385935613582956,14127989993096913797,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2216 /prefetch:11
                  7⤵
                  • System Time Discovery
                  • Enumerates system info in registry
                  PID:1000
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1652,i,11423599734877376658,12975647722364348162,262144 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2108 /prefetch:2
                  7⤵
                  • Enumerates system info in registry
                  PID:1864
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2468,i,8862153836796672381,11081641487836267951,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2492 /prefetch:13
                  7⤵
                  • Enumerates system info in registry
                  PID:936
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3324,i,8774396967788777869,5181108679710412230,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3444 /prefetch:14
                  7⤵
                  • Enumerates system info in registry
                  PID:6736
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3256,i,8216693767348143040,2400503860884741245,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3360 /prefetch:14
                  7⤵
                  • Enumerates system info in registry
                  PID:3016
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3248,i,4836841312534343147,10916498538175267578,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3404 /prefetch:14
                  7⤵
                    PID:980
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3300,i,11490992503532634489,11998967302189803348,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3424 /prefetch:14
                    7⤵
                      PID:6968
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3332,i,1836362135640124168,7618819974066570824,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3464 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:3320
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3352,i,2810380550345319675,17272365972486250692,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3484 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:2160
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3268,i,14041465455882251631,17605667134489848510,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3384 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:6928
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4164,i,7753760937096575067,7332681665566934822,2097152 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4192 /prefetch:1
                      7⤵
                      • Enumerates system info in registry
                      PID:3372
                    • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_gx_splash.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                      7⤵
                      • Modifies registry class
                      • Suspicious use of AdjustPrivilegeToken
                      PID:7156
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4704,i,10218649391613701649,9898779679934427378,2097152 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4708 /prefetch:9
                      7⤵
                        PID:6612
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4864,i,5308702783515767676,18359295517118063202,2097152 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4888 /prefetch:1
                        7⤵
                        • Enumerates system info in registry
                        PID:4028
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5148,i,12932932435421279103,5402204190273747259,2097152 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5152 /prefetch:1
                        7⤵
                          PID:6424
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5280,i,17699302405791680112,919586545361385151,2097152 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5372 /prefetch:1
                          7⤵
                          • Enumerates system info in registry
                          PID:6148
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6008,i,795247569282854167,12260411383926547184,2097152 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5584 /prefetch:9
                          7⤵
                          • Enumerates system info in registry
                          PID:6704
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5572,i,4980036798114032128,2107991050917121329,2097152 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6660 /prefetch:9
                          7⤵
                            PID:7112
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6872,i,623040438643663033,15986232054800650513,2097152 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6944 /prefetch:9
                            7⤵
                              PID:6584
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6160,i,1112929992659982267,17643235925443811621,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6448 /prefetch:12
                              7⤵
                              • Enumerates system info in registry
                              PID:6684
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6440,i,13076250073426230428,4386996622856407724,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=1640 /prefetch:14
                              7⤵
                              • Enumerates system info in registry
                              PID:6976
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4832,i,14312315106062970043,12997529975576241664,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7284 /prefetch:14
                              7⤵
                              • Enumerates system info in registry
                              PID:6888
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7316,i,11193386158127276415,14254998280485346783,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6184 /prefetch:14
                              7⤵
                                PID:6916
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7324,i,1324752759551196857,14386256632770837370,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7368 /prefetch:14
                                7⤵
                                  PID:6992
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7332,i,16204330128330451032,9076771493123797467,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7296 /prefetch:14
                                  7⤵
                                    PID:5108
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7944,i,9824036378810232874,10646253209984265684,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7820 /prefetch:14
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:6856
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8076,i,9891177054689388513,14449851980921222075,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8044 /prefetch:14
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:5908
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8232,i,13734464643057650298,18405099588768462937,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8244 /prefetch:14
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:548
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8252,i,10629642052519019557,1935519795481292053,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8376 /prefetch:14
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:4500
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8420,i,6011513302852786214,17567150415900010115,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8388 /prefetch:14
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:4136
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8440,i,14003330006960842071,14623612480491123777,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8528 /prefetch:14
                                    7⤵
                                      PID:5500
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8768,i,3241784327335483389,285229487778115152,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8784 /prefetch:14
                                      7⤵
                                        PID:1728
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8792,i,6743827837506363589,11030737514817685343,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8948 /prefetch:14
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:3304
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9080,i,11878430270173690658,5544422555079646939,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9092 /prefetch:14
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:6812
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8808,i,2036157866900415903,17079092779871483841,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8820 /prefetch:14
                                        7⤵
                                          PID:4368
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9232,i,12381896881320269360,11658090038347115635,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9344 /prefetch:14
                                          7⤵
                                            PID:1300
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=9528,i,12194995739635088999,6487216262885984607,2097152 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9588 /prefetch:9
                                            7⤵
                                              PID:3360
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9476,i,12831489551657220864,267037174203128886,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9708 /prefetch:14
                                              7⤵
                                                PID:6588
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=9868,i,16908401184169276275,16357155120176318550,2097152 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9940 /prefetch:1
                                                7⤵
                                                • Enumerates system info in registry
                                                PID:5776
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10216,i,5805321289402041249,1736934540502561272,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10080 /prefetch:14
                                                7⤵
                                                  PID:8328
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10352,i,7665908601086638995,6992265258688334075,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10364 /prefetch:14
                                                  7⤵
                                                    PID:8344
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10516,i,6482423533985802392,7644587460908980466,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10528 /prefetch:14
                                                    7⤵
                                                    • Enumerates system info in registry
                                                    PID:8440
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                                    7⤵
                                                    • Enumerates system info in registry
                                                    PID:9180
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                      C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x2a0,0x2a4,0x2a8,0x27c,0x2ac,0x7ff6ed718860,0x7ff6ed71886c,0x7ff6ed718878
                                                      8⤵
                                                        PID:2900
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3800,i,17571154960592059392,13136959275155884713,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=5548 /prefetch:14
                                                      7⤵
                                                        PID:9196
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=11044,i,14060744185686962770,1687892774909667903,2097152 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11036 /prefetch:1
                                                        7⤵
                                                        • Enumerates system info in registry
                                                        PID:8152
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11256,i,908457362919553299,17903700591918922363,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11284 /prefetch:14
                                                        7⤵
                                                          PID:8104
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11416,i,16653585849322501256,3417641968686498438,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11444 /prefetch:14
                                                          7⤵
                                                          • Enumerates system info in registry
                                                          PID:8172
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11624,i,4725155586215499525,4688383831881614434,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=11636 /prefetch:14
                                                          7⤵
                                                            PID:8296
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11468,i,11840783114173373939,15754696327190272348,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=11520 /prefetch:14
                                                            7⤵
                                                            • Enumerates system info in registry
                                                            PID:6328
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11316,i,310889322712006252,8152256300273492483,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=7864 /prefetch:14
                                                            7⤵
                                                            • Enumerates system info in registry
                                                            PID:4604
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6036,i,7262702198186573826,2050622912689371401,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=11296 /prefetch:14
                                                            7⤵
                                                            • Enumerates system info in registry
                                                            PID:4564
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6104,i,5161879260035401167,15933307672499028090,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=11892 /prefetch:14
                                                            7⤵
                                                              PID:8260
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=12072,i,12625460318107279920,4566590695717410728,2097152 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=12096 /prefetch:9
                                                              7⤵
                                                              • Enumerates system info in registry
                                                              PID:7712
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12264,i,9306670192043431276,1858646969171028306,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=12276 /prefetch:14
                                                              7⤵
                                                              • Enumerates system info in registry
                                                              PID:8468
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12244,i,1069151710738191706,15137675164687053749,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=7328 /prefetch:14
                                                              7⤵
                                                                PID:8560
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7720,i,3247666849819237387,15836606125148895090,524288 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=7784 /prefetch:14
                                                                7⤵
                                                                  PID:8976
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=12588,i,18140105201167705575,9679308860303045553,2097152 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=12548 /prefetch:9
                                                                  7⤵
                                                                  • Enumerates system info in registry
                                                                  PID:5292
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=10884,i,1688768972403637774,16746468219908298985,2097152 --field-trial-handle=2120,i,18273526228288401774,6330753767245076526,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2968931236151052048,12911271142336249828,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=10476 /prefetch:9
                                                                  7⤵
                                                                  • Enumerates system info in registry
                                                                  PID:8740
                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\opera_package_202607081253351\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\opera_package_202607081253351\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"
                                                            4⤵
                                                            • Executes dropped EXE
                                                            • System Location Discovery: System Language Discovery
                                                            PID:2912
                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\opera_package_202607081253351\assistant\assistant_installer.exe
                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\opera_package_202607081253351\assistant\assistant_installer.exe" --version
                                                            4⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • System Location Discovery: System Language Discovery
                                                            • Enumerates system info in registry
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:2112
                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\opera_package_202607081253351\assistant\assistant_installer.exe
                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\opera_package_202607081253351\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xad4040,0xad404c,0xad4058
                                                              5⤵
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              • System Location Discovery: System Language Discovery
                                                              PID:2572
                                                    • C:\Windows\system32\svchost.exe
                                                      C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                      1⤵
                                                        PID:3908
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                        C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                        1⤵
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        • System Location Discovery: System Language Discovery
                                                        • Suspicious use of FindShellTrayWindow
                                                        • Suspicious use of SendNotifyMessage
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:6020
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                          2⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • Enumerates system info in registry
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:1784
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                            C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x298,0x29c,0x2a0,0x294,0x2a4,0x7ffc92044fe0,0x7ffc92044ff0,0x7ffc92045000
                                                            3⤵
                                                            • Executes dropped EXE
                                                            PID:4228
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                          2⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • Enumerates system info in registry
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:3492
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                            C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffc92044fe0,0x7ffc92044ff0,0x7ffc92045000
                                                            3⤵
                                                            • Executes dropped EXE
                                                            PID:4676
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                          C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x2b4,0x2b8,0x2bc,0x290,0x2c0,0x75c830,0x75c83c,0x75c848
                                                          2⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • System Location Discovery: System Language Discovery
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:4008
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                            3⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:3432
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                              C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffc92044fe0,0x7ffc92044ff0,0x7ffc92045000
                                                              4⤵
                                                              • Executes dropped EXE
                                                              PID:5044
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                            3⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • Enumerates system info in registry
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:2132
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                              C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffc92044fe0,0x7ffc92044ff0,0x7ffc92045000
                                                              4⤵
                                                              • Executes dropped EXE
                                                              PID:3956
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                            3⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • Enumerates system info in registry
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:2152
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                              C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffc92044fe0,0x7ffc92044ff0,0x7ffc92045000
                                                              4⤵
                                                              • Executes dropped EXE
                                                              PID:1152
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                                        1⤵
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:1048
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                          C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ffc92044fe0,0x7ffc92044ff0,0x7ffc92045000
                                                          2⤵
                                                          • Executes dropped EXE
                                                          PID:880
                                                      • C:\Windows\system32\wbem\unsecapp.exe
                                                        C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                        1⤵
                                                          PID:5140
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                          1⤵
                                                          • Enumerates system info in registry
                                                          PID:9188
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                            C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x294,0x298,0x29c,0x234,0x2a0,0x7ff6ed718860,0x7ff6ed71886c,0x7ff6ed718878
                                                            2⤵
                                                              PID:7424
                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                              2⤵
                                                                PID:6744
                                                            • C:\Windows\SysWOW64\DllHost.exe
                                                              C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
                                                              1⤵
                                                              • System Location Discovery: System Language Discovery
                                                              • Suspicious use of SetWindowsHookEx
                                                              PID:9024
                                                            • C:\Windows\system32\svchost.exe
                                                              C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                                                              1⤵
                                                                PID:8240

                                                              Network

                                                                    MITRE ATT&CK Enterprise v16

                                                                    Reconnaissance

                                                                    Resource Development

                                                                    Initial Access

                                                                    Execution

                                                                    Persistence

                                                                    Boot or Logon Autostart Execution

                                                                    1
                                                                    T1547

                                                                    Registry Run Keys / Startup Folder

                                                                    1
                                                                    T1547.001

                                                                    Event Triggered Execution

                                                                    1
                                                                    T1546

                                                                    Component Object Model Hijacking

                                                                    1
                                                                    T1546.015

                                                                    Privilege Escalation

                                                                    Boot or Logon Autostart Execution

                                                                    1
                                                                    T1547

                                                                    Registry Run Keys / Startup Folder

                                                                    1
                                                                    T1547.001

                                                                    Event Triggered Execution

                                                                    1
                                                                    T1546

                                                                    Component Object Model Hijacking

                                                                    1
                                                                    T1546.015

                                                                    Defense Evasion

                                                                    Modify Registry

                                                                    2
                                                                    T1112

                                                                    Credential Access

                                                                    Credentials from Password Stores

                                                                    1
                                                                    T1555

                                                                    Credentials from Web Browsers

                                                                    1
                                                                    T1555.003

                                                                    Unsecured Credentials

                                                                    1
                                                                    T1552

                                                                    Credentials In Files

                                                                    1
                                                                    T1552.001

                                                                    Discovery

                                                                    Peripheral Device Discovery

                                                                    1
                                                                    T1120

                                                                    Query Registry

                                                                    5
                                                                    T1012

                                                                    System Information Discovery

                                                                    4
                                                                    T1082

                                                                    System Location Discovery

                                                                    1
                                                                    T1614

                                                                    System Language Discovery

                                                                    1
                                                                    T1614.001

                                                                    System Time Discovery

                                                                    1
                                                                    T1124

                                                                    Lateral Movement

                                                                    Collection

                                                                    Data from Local System

                                                                    1
                                                                    T1005

                                                                    Command and Control

                                                                    Exfiltration

                                                                    Impact

                                                                    Replay Monitor

                                                                    Loading Replay Monitor...

                                                                    Downloads

                                                                    8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                    • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                    • Size 1KB
                                                                    • SHA256 63b14543360f5e89942ea8d5113526e64fbc71c1207328f0136b3a495d921dd0
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    B46811C17859FFB409CF0E904A4AA8F8
                                                                    • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
                                                                    • Size 528B
                                                                    • SHA256 d2bb091268ade68ad8121d2184d0fbce128070156304bd4de312e6fbd267409c
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                    • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                    • Size 471B
                                                                    • SHA256 3ab0fbd412f5306eba58800c356e78b01175d4efeb956c78a30ee043eb209104
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                    • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                    • Size 174B
                                                                    • SHA256 7b16c5f9d23ffc7ad17f06d329dc4fc616e6ae65e1cf34bd4011ee7a855c9424
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    B46811C17859FFB409CF0E904A4AA8F8
                                                                    • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
                                                                    • Size 170B
                                                                    • SHA256 be5d1f38eb6f7b3c97d3c8a6dee20bf5e11d89a942172afa5095e93444e7fc5a
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                    • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                    • Size 416B
                                                                    • SHA256 4ae893692f98045089485d4f05825a84f4b88fbafcc5beb860934e57cfd74296
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    data_0
                                                                    • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_0
                                                                    • Size 8KB
                                                                    • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                    • MD5 SHA1 SHA512 SSDEEP
                                                                    Submit Download

                                                                    data_2
                                                                    • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_2
                                                                    • Size 8KB
                                                                    • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                    • MD5 SHA1 SHA512 SSDEEP
                                                                    Submit Download

                                                                    data_3
                                                                    • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_3
                                                                    • Size 8KB
                                                                    • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                    • MD5 SHA1 SHA512 SSDEEP
                                                                    Submit Download

                                                                    133.0.5932.24.manifest
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\133.0.5932.24.manifest
                                                                    • Size 225B
                                                                    • SHA256 0c224a50985264cb571fd2c0ed61bc989fd6ecef11c453e2582a226700d6d268
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    150x150Logo.scale-100.png
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-100.png
                                                                    • Size 1KB
                                                                    • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    150x150Logo.scale-100_contrast-white.png
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-100_contrast-white.png
                                                                    • Size 1KB
                                                                    • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    150x150Logo.scale-140.png
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-140.png
                                                                    • Size 1KB
                                                                    • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    150x150Logo.scale-140_contrast-white.png
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-140_contrast-white.png
                                                                    • Size 1KB
                                                                    • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    150x150Logo.scale-180.png
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-180.png
                                                                    • Size 1KB
                                                                    • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    150x150Logo.scale-180_contrast-white.png
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-180_contrast-white.png
                                                                    • Size 1KB
                                                                    • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    150x150Logo.scale-80.png
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-80.png
                                                                    • Size 827B
                                                                    • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    150x150Logo.scale-80_contrast-white.png
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-80_contrast-white.png
                                                                    • Size 799B
                                                                    • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    70x70Logo.scale-100.png
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-100.png
                                                                    • Size 781B
                                                                    • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    70x70Logo.scale-100_contrast-white.png
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-100_contrast-white.png
                                                                    • Size 752B
                                                                    • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    70x70Logo.scale-140.png
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-140.png
                                                                    • Size 991B
                                                                    • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    70x70Logo.scale-140_contrast-white.png
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-140_contrast-white.png
                                                                    • Size 865B
                                                                    • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    70x70Logo.scale-180.png
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-180.png
                                                                    • Size 1KB
                                                                    • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    70x70Logo.scale-180_contrast-white.png
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-180_contrast-white.png
                                                                    • Size 1KB
                                                                    • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    70x70Logo.scale-80.png
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-80.png
                                                                    • Size 590B
                                                                    • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    70x70Logo.scale-80_contrast-white.png
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-80_contrast-white.png
                                                                    • Size 519B
                                                                    • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    assistant_package
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\assistant_package
                                                                    • Size 3.6MB
                                                                    • SHA256 476635dedd92ecb61b45179264d0f6f73da81e68e9786c3c4f6c2b8efe540452
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    d3dcompiler_47.dll
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\d3dcompiler_47.dll
                                                                    • Size 4.5MB
                                                                    • SHA256 7133c3fe1899ef81aeb523a22b58598172e5763fb0a27a10ccce4b34566612f7
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    dxcompiler.dll
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\dxcompiler.dll
                                                                    • Size 24.4MB
                                                                    • SHA256 a453267bdd1c7f207702684b6a11b742df49176eeb2e28728cb5eec086896a99
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    dxil.dll
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\dxil.dll
                                                                    • Size 1.5MB
                                                                    • SHA256 d77798ac46e1d6610805033b266320e343d00741cf76049dd96ea5e2d99e39de
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    files_list
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\files_list
                                                                    • Size 6KB
                                                                    • SHA256 df53c99bd75d5a50ab78ca0291b46b2da3dda808c903b90d928e814808205df8
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    headless_command_resources.pak
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\headless_command_resources.pak
                                                                    • Size 2KB
                                                                    • SHA256 9337d260af693284e85d353db0926beb9932412c268558f447c74e5064bd6a3f
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    icudtl.dat
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\icudtl.dat
                                                                    • Size 10.4MB
                                                                    • SHA256 d0a05dcc74a5b6ce1657a2ae44a58c0df03a1a07c24a4df2e3381353911382fc
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    installer.exe
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe
                                                                    • Size 8.3MB
                                                                    • SHA256 968128ce27a633a91f092062d5d0a36586dd01129c9e50d420d85b2f69319fb9
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    installer_helper_64.exe
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer_helper_64.exe
                                                                    • Size 639KB
                                                                    • SHA256 adda39e020da8fc8c98fddb668bc07cd3aa3b72a0f96ab9819eafe028844c994
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    libEGL.dll
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\libEGL.dll
                                                                    • Size 492KB
                                                                    • SHA256 47ba65371272562b0510f1b389bb9ff4a0e21845904a4a83958497dead3dc379
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    libGLESv2.dll
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\libGLESv2.dll
                                                                    • Size 7.5MB
                                                                    • SHA256 85e8cf63991c492fc72edd810c239d030656e31de2a04def498b82d5d891cc36
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    bg.pak
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\bg.pak
                                                                    • Size 1005KB
                                                                    • SHA256 8a151c2685798e8c559c4329496eac4845b23bf977c1f10fa97e452617179036
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    bn.pak
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\bn.pak
                                                                    • Size 1.3MB
                                                                    • SHA256 75b433bac6b07c87874885f87d38d6a87dab684310611072e880ea157cebf967
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    ca.pak
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\ca.pak
                                                                    • Size 634KB
                                                                    • SHA256 951a872c07a86b56273a468472edc64ff1fd3072ee92f1b747c2d56862266e9a
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    cs.pak
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\cs.pak
                                                                    • Size 633KB
                                                                    • SHA256 1ad3a061c4efeb9719caff31b374f2c7461bbf26dfa83d23378f7d146d6a2961
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    da.pak
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\da.pak
                                                                    • Size 584KB
                                                                    • SHA256 2bce9052d3537685476b030689ddd793045e5d173201192455753a374903a5d3
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    installer_prefs.json
                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                                                    • Size 1KB
                                                                    • SHA256 e6456df96ade0ed43838cd00a9eea2a7cfdadf5265e39e7eb4444c08f543841e
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    Opera Browser.lnk
                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\opera_package_202607081253351\Opera Browser.lnk
                                                                    • Size 1KB
                                                                    • SHA256 0b61acf30ace7b83efbb6364350bc3bef54dcf407f39c4e66fc58af248cb2132
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    additional_file0.tmp
                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\opera_package_202607081253351\additional_file0.tmp
                                                                    • Size 2.8MB
                                                                    • SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    assistant_installer.exe
                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\opera_package_202607081253351\assistant\assistant_installer.exe
                                                                    • Size 2.4MB
                                                                    • SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    dbgcore.DLL
                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\opera_package_202607081253351\assistant\dbgcore.DLL
                                                                    • Size 222KB
                                                                    • SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    dbghelp.dll
                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\opera_package_202607081253351\assistant\dbghelp.dll
                                                                    • Size 1.8MB
                                                                    • SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    installer_prefs_include.json
                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\opera_package_202607081253351\installer_prefs_include.json
                                                                    • Size 224B
                                                                    • SHA256 f799101396e58ec98238b81669c288b0649788476fdc997cd029cfd5239c8aad
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    installer_prefs_include.json
                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\opera_package_202607081253351\installer_prefs_include.json
                                                                    • Size 239B
                                                                    • SHA256 ad0a70852936dbf15eeb5accadd7acc1554959df5b85898911e4281e402e287a
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    installer_prefs_include.json
                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\10976eb4-133a-4a8e-b7a7-6c6bc4699065 Opera Installer Temp\opera_package_202607081253351\installer_prefs_include.json
                                                                    • Size 1KB
                                                                    • SHA256 d9bcb6de8c84581c011f7a9199558172af9f5897187f49ca9f9467896bfd5b7d
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    installer.exe
                                                                    • Path C:\Users\Admin\AppData\Local\Temp\7zSCA6C4559\installer.exe
                                                                    • Size 8.3MB
                                                                    • SHA256 0221deb9031dc461368bc66f1db22c1c6b1d4a291a9f3223f4c3653bbd646e0e
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    OpInst.exe
                                                                    • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                                                    • Size 3.1MB
                                                                    • SHA256 ba1b31fd02af4979c6eaae8f170dfd3425a6e8a5c582f5ea91c91711535448fb
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    bg.png
                                                                    • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                                                    • Size 224KB
                                                                    • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    fa343f83-99d0-47f4-9661-c279379ae456.tmp
                                                                    • Path C:\Users\Admin\AppData\Local\Temp\fa343f83-99d0-47f4-9661-c279379ae456.tmp
                                                                    • Size 14KB
                                                                    • SHA256 f1d24a67ce5aa49b3a6a207a0c49c636f0a5b4851ce493326c76a0b78eb7c545
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    favicon_opera_one.png
                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2584_1766082013\CRX_INSTALL\favicon_opera_one.png
                                                                    • Size 2KB
                                                                    • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    reader_mode.js
                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2584_1766082013\CRX_INSTALL\reader_mode.js
                                                                    • Size 112KB
                                                                    • SHA256 2351bf9735cdb0eb1aeb738cf596ec80a063f47447c9cba68da963c644e7d0ea
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    spotify_frame_interceptor.js
                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2584_1766082013\CRX_INSTALL\spotify_frame_interceptor.js
                                                                    • Size 5KB
                                                                    • SHA256 efc95edf1976955e0aaad47bd2e84951c0fb06f18f8b1c09646f0c950d60d4cd
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    Icon_Light_Neutral.png
                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5216_329635273\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                    • Size 2KB
                                                                    • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    main.js
                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5216_409044543\CRX_INSTALL\main.js
                                                                    • Size 47KB
                                                                    • SHA256 4c2cc909a2d1ca6b84270a6329e81f0f1de229ce49fd9412033a5c45e1d2e72f
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    cos-bridge.js
                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5216_894432765\CRX_INSTALL\cos-bridge.js
                                                                    • Size 173B
                                                                    • SHA256 0c4209fe6d13d432cc0035b20f1eb58159ed23bda2417c07f9e8fed079414025
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    cos-content.js
                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5216_894432765\CRX_INSTALL\cos-content.js
                                                                    • Size 502B
                                                                    • SHA256 e3b30cd7ca6d753dcf9fe91f9c1fb4eeae7b9dc00eebf87f5f24e2316b76390f
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    manifest.json
                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5216_894432765\CRX_INSTALL\manifest.json
                                                                    • Size 1KB
                                                                    • SHA256 028acb85f69bedc88c9f9ce97bf0c31615f83032d90de1b7017614a389648b71
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    messages.json
                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6892_459472742\CRX_INSTALL\_locales\en\messages.json
                                                                    • Size 401B
                                                                    • SHA256 9ad8ffac49958d5bf771eb6f0bd7462b32597696c9d0a45ade771ef8c124b1bb
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    settings.dat
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                    • Size 40B
                                                                    • SHA256 f155361b046312a57f690eb0ee0a44915392074773a9191cc9247846a59482c0
                                                                    • MD5 SHA1 SHA512
                                                                    Submit Download

                                                                    0b00af2b-37c2-4f8f-bed0-6e2c9909f625.tmp
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\0b00af2b-37c2-4f8f-bed0-6e2c9909f625.tmp
                                                                    • Size 10KB
                                                                    • SHA256 ad0f87992f1258e324bac5fe7676e47e1a6ef7ae39fa4b5dd03327a25b81a86c
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    2ed38ddb-1a60-40e8-88cf-a5b5c9d0623a.tmp
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\2ed38ddb-1a60-40e8-88cf-a5b5c9d0623a.tmp
                                                                    • Size 171B
                                                                    • SHA256 6657bf88ff8a2cc7dd945d1742d2b0e4c21563967dca0314ce9ee37bfebd064f
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    51d9f22d-838e-44ec-8567-adfc7fc0cfab.tmp
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\51d9f22d-838e-44ec-8567-adfc7fc0cfab.tmp
                                                                    • Size 203B
                                                                    • SHA256 0f1cbb27cb7836838cf6c241ed3ca1a31e905b0fb2c8c2d47698e4208de42a67
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    8ef08c28-aecc-4349-a384-0e097f549f5d.tmp
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\8ef08c28-aecc-4349-a384-0e097f549f5d.tmp
                                                                    • Size 6B
                                                                    • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                    • MD5 SHA1 SHA512
                                                                    Submit Download

                                                                    9a9e57c4-af42-4faa-bd8f-9d2238eb6191.tmp
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\9a9e57c4-af42-4faa-bd8f-9d2238eb6191.tmp
                                                                    • Size 203B
                                                                    • SHA256 0faf0b6d2af36a78892ac71eca2d6e0d39423f56a7581819a00e7c3d5e139023
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    Bookmarks
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                                                    • Size 36KB
                                                                    • SHA256 268c7d75d5ad25dff5ff2181d9ca37f8f1a4897eeb21efef8e53954f258b08fe
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    BookmarksExtras
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                                                                    • Size 253KB
                                                                    • SHA256 3db2be5baaef112701c86e9171ecab7578883524fa641a1ba43c2fd993f216af
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    6b02036a-fd34-4c6a-b7f0-fe12525bd023.tmp
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\6b02036a-fd34-4c6a-b7f0-fe12525bd023.tmp
                                                                    • Size 48B
                                                                    • SHA256 05d79583f81210cd4d81e05658aed02218ed1a5fab827dbf7c1348e3e7604f30
                                                                    • MD5 SHA1 SHA512
                                                                    Submit Download

                                                                    the-real-index
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                    • Size 264B
                                                                    • SHA256 142cf95ec4909ae7a67f1d57220d943e712d6379f56651c3b22d834474940de3
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    the-real-index
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                    • Size 744B
                                                                    • SHA256 45cc4440f89ef82d71958aa264474f932bf5ddd11cb0eb7a66b51b1ae2309db9
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    the-real-index
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                    • Size 264B
                                                                    • SHA256 855fa4baf78d989022baa952f39ce25f12c4afb53f573b03ae325575a56e3902
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    MANIFEST-000001
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
                                                                    • Size 41B
                                                                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                    • MD5 SHA1 SHA512
                                                                    Submit Download

                                                                    preview.png
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\bckiheihmdiaaoadimffbjbjafkoooaj\1.0.4_0\wallpaper\preview.png
                                                                    • Size 464KB
                                                                    • SHA256 c5a2b18b255c6a4029de97ef9d00af6e563b562a2abdbee1e934ff77d5a92c29
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    background.js
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                                                                    • Size 86KB
                                                                    • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    Icon_Light_Neutral.png
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                                                                    • Size 2KB
                                                                    • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    popup.js.LICENSE.txt
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
                                                                    • Size 1KB
                                                                    • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    rules.json
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
                                                                    • Size 839B
                                                                    • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    45e07b07-d377-4aa3-a4c8-d1abd4667724.tmp
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\45e07b07-d377-4aa3-a4c8-d1abd4667724.tmp
                                                                    • Size 27KB
                                                                    • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    4e701e27-c74a-4bbc-96ee-4c9756a2748c.tmp
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\4e701e27-c74a-4bbc-96ee-4c9756a2748c.tmp
                                                                    • Size 27KB
                                                                    • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    6729e180-7ab8-4f9e-a64a-76f2e8e9c34c.tmp
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\6729e180-7ab8-4f9e-a64a-76f2e8e9c34c.tmp
                                                                    • Size 27KB
                                                                    • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    6cb9856b-a78c-4132-ae98-fa5197601e0a.tmp
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\6cb9856b-a78c-4132-ae98-fa5197601e0a.tmp
                                                                    • Size 27KB
                                                                    • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    ae9f91b2-5cc6-4f70-9465-00efbdc36562.tmp
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\ae9f91b2-5cc6-4f70-9465-00efbdc36562.tmp
                                                                    • Size 27KB
                                                                    • SHA256 39bd99139f46534251ca30ee1eafe846edde8f96356642e04b68a9f2af9799b7
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    ec954075-2ca6-40c3-8d62-e8b783974590.tmp
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\ec954075-2ca6-40c3-8d62-e8b783974590.tmp
                                                                    • Size 27KB
                                                                    • SHA256 b8f0a6164e126d0f70798a96f456487080b5473bee571bb9594600f8a53901c7
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    Network Persistent State
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                    • Size 1KB
                                                                    • SHA256 2043f92e346c75436568a5909554e6781886bf0324ce1dac484e1eedc6090bcd
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    b31a4fc9-6d44-4180-850f-155dd7a5e5b4.tmp
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\b31a4fc9-6d44-4180-850f-155dd7a5e5b4.tmp
                                                                    • Size 2B
                                                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                    • MD5 SHA1 SHA512
                                                                    Submit Download

                                                                    Preferences
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                    • Size 15KB
                                                                    • SHA256 77856a77fe037bef03cc396ce0f344481ac257dbaf352273c757b5a5f61a68da
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    Preferences
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                    • Size 15KB
                                                                    • SHA256 43dea83bb179f19805560bd729ed167536b3b9e06eeba373806954998ba81569
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    Preferences
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                    • Size 10KB
                                                                    • SHA256 a67123e9186a59c898639ffaf41898e789bbece7b04e366c849c19d2ce4c97c5
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    Preferences
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                    • Size 15KB
                                                                    • SHA256 01ef4905ab50af7fc992df04bcb3e7868128b6e6c079b3c0d39a9c64604b42e2
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    Preferences
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                    • Size 15KB
                                                                    • SHA256 043415ea9fdbc65cb19ffbc6fab57b25056fdbb758fdcb5df7c54b0b0e73b256
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    Secure Preferences
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                    • Size 116KB
                                                                    • SHA256 7334ecfda84b2cda06c5801921c7985e656cb74d86f94650740aa6d0bcaeccb6
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    Secure Preferences
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                    • Size 91KB
                                                                    • SHA256 39d89944507981883605c3413e277c90a5f6bb9808299fe9f7ae3b80589d7a3c
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    Secure Preferences
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                    • Size 91KB
                                                                    • SHA256 8c66e7e421b617993523b1a08fcc39754b016713903d202362b1d2aff335b645
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    01de4b55-8349-4cc1-8f32-df4b7a5fa155.tmp
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\01de4b55-8349-4cc1-8f32-df4b7a5fa155.tmp
                                                                    • Size 72B
                                                                    • SHA256 c5a61f9d08b4553ad172c586991866dfd888593f513a04a64cc817383062e18c
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    the-real-index
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                    • Size 72B
                                                                    • SHA256 6d4c230d9afb3b7017539131fe510c0e0d2f62f76c278de7333df0a1fafd969f
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    the-real-index
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                    • Size 48B
                                                                    • SHA256 0a8f13e541ffeaa1a5a6e264ddc1043f8163e58237c5c6d249abd3c0c06bc073
                                                                    • MD5 SHA1 SHA512
                                                                    Submit Download

                                                                    the-real-index
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                    • Size 288B
                                                                    • SHA256 9a806c2fc1c19aaf0646a110602eaa3f5e6ee658028ddeffec333a8430f96928
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    the-real-index
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                    • Size 288B
                                                                    • SHA256 55e6ab0f0dfcd70024fa3ddf72ee897f58990d3cec5de9d638ec1798c4cd1912
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    256f3071-3a52-4c1e-88ad-548b788a9e4c.tmp
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\256f3071-3a52-4c1e-88ad-548b788a9e4c.tmp
                                                                    • Size 10KB
                                                                    • SHA256 abbb9162ad87bccf2866cb4b3d53669b6afbb682309707071016f2b0f30c434a
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    6b08855e-5dd5-4082-a9f1-0678b8bb0828.tmp
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\6b08855e-5dd5-4082-a9f1-0678b8bb0828.tmp
                                                                    • Size 381B
                                                                    • SHA256 f206e467efa3c03d550a2d8f3bf7398c36940858805a33d56396704bd34c0ade
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    8bdcf027-5900-4505-aa94-164b896c28b1.tmp
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\8bdcf027-5900-4505-aa94-164b896c28b1.tmp
                                                                    • Size 381B
                                                                    • SHA256 30a5b9704c4e4e13ba43ae9a0c86e2352134c36596d838d98b94689c32f6ae35
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    d6c549a2-aa91-477a-b262-eb0a23c79773.tmp
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\d6c549a2-aa91-477a-b262-eb0a23c79773.tmp
                                                                    • Size 381B
                                                                    • SHA256 51364e97338e4748ce32b0208a795cbea33cd9846a31f7e15332f315df0d9925
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 11KB
                                                                    • SHA256 36da849118103d094ca362e6d670b03b9499716ba294f8ccfa26e48820ae2d95
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 13KB
                                                                    • SHA256 700ccd0c46ff8f877363ab83bed99d8acb31887b372e4172576ba8eba9de7330
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 12KB
                                                                    • SHA256 312de6a9b6697ab4ac8f4dd7c9c86b79720cfb6f8fc9fc183c273597a9fecef4
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 13KB
                                                                    • SHA256 e566d1d3719bbf9963f6db6ec27bc367651a03859eda56700eea45748cc7a962
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 10KB
                                                                    • SHA256 1d85b7e1d383be56953f671e048d4919f6cb5f9346c3afc5d8771b4e9c682cf5
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 11KB
                                                                    • SHA256 6cb885f2899ab59ef37861cccea41b7da529562da6362c929bc754580757a6b2
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 12KB
                                                                    • SHA256 a818011d487912cf40605f1f45dc8e8a2da1c1ffd2eb293fb07dfdcc022d0588
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 12KB
                                                                    • SHA256 f9fe81a66e498f456decf45c18e63703d9870ef5f6c8435f9061943710694101
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 9KB
                                                                    • SHA256 01661cda06f79afc8697181fe2de9a18c0a8ee27225d2e55459430af4aaaa8fc
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 9KB
                                                                    • SHA256 a482c57bd39972b554705b3c2f11333721626966079fdd35b6693fc9b9f82f3b
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 9KB
                                                                    • SHA256 395c468b3dac94120e504c2fadf6b8cc5ff5a68c3d45eb3320cf51175471870f
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 10KB
                                                                    • SHA256 0e0e85e06d6d81b90fc8c02b361f3e8c1393e1d8abe67d76c4bdb8c5d6294f84
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 10KB
                                                                    • SHA256 2efde14f8c822836872dc67fccf8a8635cb8bbd4290aacdc22bec01315c748a2
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 10KB
                                                                    • SHA256 455fdb6ad9cabde564c564940e4cb299d953e82f13e83101ffb6278d580843b4
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 10KB
                                                                    • SHA256 ec5cee12ef4abe6b684fe1608b6cf0c79ad1400b08605c97ad8500e073d0b351
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 10KB
                                                                    • SHA256 d4045fa1f51a786a6bef3f48905a78c801a49a8b75dc6091b87a49a5964aa92d
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 10KB
                                                                    • SHA256 878e7cb8574c5b98b7e02b99f963e2c7a709c913cf84af4892ff7c8464a2c306
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 11KB
                                                                    • SHA256 9a190469eb2d59f5b76711342cfac1f5fd543d893fe91fd3c7560a93bd5169c7
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 12KB
                                                                    • SHA256 f899152f0933c4954108ae7bd88f4833143e3adea0680bef378d1c2cddf34b06
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 733B
                                                                    • SHA256 29863ce967234644ec05b83930b28ac6f48a7896406ba64298bbea6393be22c3
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 925B
                                                                    • SHA256 d3ba25f09f0db27601ddab254abf2a006a9e0a50d26ba90ab5fed8ddac0fab1b
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 973B
                                                                    • SHA256 379dd78595f35a03191cf4b5ef9a0a565d411c193f360299484fe292a2a78181
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 1KB
                                                                    • SHA256 0e4b69723323352c5994968176219275437a4ccf5e207a436a8ee6cc1fd18ca1
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 1KB
                                                                    • SHA256 64fb0018902ee90a200ee2a14b511afdcbb41ecc4b155f5d5c76af72f99b1a06
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 9KB
                                                                    • SHA256 9a1381c922ecfbe95476b9799041a4a1c62d0829b9d3a925fb655c3671b0add4
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 7KB
                                                                    • SHA256 ba293db369521248635ab2c4249c504b5e9547990d1c4bf90ea2b0ad706d84c7
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 9KB
                                                                    • SHA256 2149cae14c8ca72288f11365787fab3435bba284e7cffc82ef719c08fdd05d94
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 9KB
                                                                    • SHA256 dfa44bb298c0665ef207ce2c4e736779a2a6d743291abc6d1fbef7caff2285ed
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 9KB
                                                                    • SHA256 7b62ab10c09ed32f699ab3099b151f3013df9cc0c80fbece5c14eb3bc0f9933e
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 9KB
                                                                    • SHA256 d6c34adb5649792cb86ff65ebeb4125598423acfc417160913f258387155955f
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 10KB
                                                                    • SHA256 3db94903e68e2adb791b81bf8644690b98dae6121633150b662615d029f7084e
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 10KB
                                                                    • SHA256 e3d3e261b85d13317236778cb2d84cdb69ae4cbcee0141cc6902f34c3df9fef2
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 13KB
                                                                    • SHA256 e7156eb9470b17b58a58c4d72785b970d7acac8078a3f60704d3a5ed59140034
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 13KB
                                                                    • SHA256 c6e22314827170818bd6fc8b43b4918a8f2fc093a1274f571db2c9cd2e2d933c
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 7KB
                                                                    • SHA256 b04276a6f2f6cc38742e6bbb1dca1d48cc961771a74ccecc2695770b368c0379
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 10KB
                                                                    • SHA256 1b3b5f126f8c609b036697ff2c7061354ac330a45868e8bebd7590a151e18f27
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 10KB
                                                                    • SHA256 e36fe3e8914c80a11952247195406752f5da9a9f863a7f2c32ea97659c4492c6
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 11KB
                                                                    • SHA256 c59df8c26f2c57770066b66cd6822e095fb5cfcde36e85a4e39ad28ad0382950
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 11KB
                                                                    • SHA256 cbba33a8f21dba98fe653b3a1b5808f9b9fee3f3c0fc8a552dd41cc360f7973a
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 12KB
                                                                    • SHA256 e37c88259f71b5860cec4871ae8efe3372a0bc44ebdda0267401bc7635a82142
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 1KB
                                                                    • SHA256 7cd51d72fa9541ebc5c2e442b4f10736fea9c81e7de8031c517c95ea1106ffbd
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 493B
                                                                    • SHA256 f457815a92679b0501c7add4cdde92d7b1db2db8767acacfb9dc870497fa104f
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 7KB
                                                                    • SHA256 2c693f7f85d127e6cb4e512c69d2fed7b2d07afbcb6d6bab484a2d834b7fc79c
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 9KB
                                                                    • SHA256 035996a1a649bd5623c00e02ef0423a1ba50bac4b41be75c751ab45450cc23e2
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 1KB
                                                                    • SHA256 5429a2dc4b3c6f3028c471153b773435af5bfd1f934bcc6f5c85ff5f103fa8f3
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 1KB
                                                                    • SHA256 d0b341d5d6c889c2fb1d378c1f64543ff15d58986610778e41a26800dddaca0c
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 11KB
                                                                    • SHA256 92bb2cc759fb73feedce54a7ff0627dcab6d73005980b8919b834065c349fa15
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 11KB
                                                                    • SHA256 afdc9fcc09cc4183277256bfc4e00b99c6c282f358c31aa5b92439680e069e5d
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 10KB
                                                                    • SHA256 1d0ced8a91e4a0c45815df5becdc273c8525fa770f623152640933958e7d8c25
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 12KB
                                                                    • SHA256 a7a620b26b75b664414aa76c03e11510ae49ba705ec68a3b6686d365a05f6f61
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 1KB
                                                                    • SHA256 fd40bc4585e8a6c9a310d1f2f7df66915e693f3d79be15e955fd508f70925f9a
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 1KB
                                                                    • SHA256 ab8ab82f0100a100ae22a58cdfae8703adad289e2cba8b919de61232367e6f93
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 8KB
                                                                    • SHA256 8d6853832402e4867a235fe50f9433bf6ace90857f6d500d3708a7224b342190
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 1KB
                                                                    • SHA256 ce1bee25006c7a22365370002785de98d379de7342f1fba9bd4c8ee4943156f3
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 7KB
                                                                    • SHA256 d76b23ada3b184122a19462b4093eac221e02e4e605d0a658c2dad5b7e51ab92
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 8KB
                                                                    • SHA256 3b9c380748ef1c3b144e314b049cd4734aa3d4d748c64978839e100fdaa18022
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 1KB
                                                                    • SHA256 29f51a9c2939dfb7f6f0776236d3da5170e9e118c32f00c1d03c6a39aeb4e399
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 9KB
                                                                    • SHA256 73033a032cf8dbb7afafd0a6c0d74fec69f7b3cbac3d6380c8b8814139ff010f
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 621B
                                                                    • SHA256 141f4a86335d23b1f41e667174366c8f54733a26ebdd7561cd075df3bd3867a6
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 9KB
                                                                    • SHA256 0d1ac6f111386f6a32723ff372a91424d84eeb447eb3a7124673ba7e8820da52
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 2KB
                                                                    • SHA256 c1de38d06ec7253576d74d030ef38598238650e32613f9589d8d0bfcaf0ef33f
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 7KB
                                                                    • SHA256 923bfc06f12ae32048912daa8036ee0b17b72077efb49491232bcdfeaaa910e9
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 7KB
                                                                    • SHA256 36dee17ca99c3461251bd9d30e8102ff61224aa2561cbe276b9ebc7f6398ab11
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 9KB
                                                                    • SHA256 0bd4496d6631a72fe1e026e8f9dce05f993ab782476addf568477fce7a257482
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 8KB
                                                                    • SHA256 b8dd7a3ac94ba57211b0d83fcbef30842236d622d17a20d1f3e6936ec4b9e030
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 9KB
                                                                    • SHA256 f314c27899c92ec38bda095bea8621afd60c3d367dc4e2b8c74c73237111cfd8
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 9KB
                                                                    • SHA256 a3f62ec3baca69331dcbb3c0c743d43d6fca2a1f31bd437d018efb82985874b5
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 10KB
                                                                    • SHA256 f24d24aed77b24e191f0960096c906329c467d11363aa3b29ba8ca5ba6dfc880
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 11KB
                                                                    • SHA256 9960f358110c938171743b0885ddaf0688a56f92a402d91f8547e8b5f7008e2c
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e84f1b4-efec-4d78-a71c-4151555dea06.raw
                                                                    • Size 10KB
                                                                    • SHA256 c4b2c7e140064e87cc009cbaa710fede591fd83912d89c2cb386be23a8236d6f
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    session_0edd93cf-41c3-4dd8-ad39-467eb0428be0.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0edd93cf-41c3-4dd8-ad39-467eb0428be0.raw
                                                                    • Size 781B
                                                                    • SHA256 602900631e535d922bd06fd48be529d494a0abec07b3cddc1ccf5f1c6a05cc46
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0edd93cf-41c3-4dd8-ad39-467eb0428be0.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0edd93cf-41c3-4dd8-ad39-467eb0428be0.raw
                                                                    • Size 1KB
                                                                    • SHA256 c8d595eee369fb16ee156acc8f2f17b5a2989182fff19e2b901d42f23fba6efa
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0edd93cf-41c3-4dd8-ad39-467eb0428be0.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0edd93cf-41c3-4dd8-ad39-467eb0428be0.raw
                                                                    • Size 493B
                                                                    • SHA256 165c62b4dcc16915f9c4122202428e3a41dcc67f735ca905ec419d60fcb573d3
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0edd93cf-41c3-4dd8-ad39-467eb0428be0.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0edd93cf-41c3-4dd8-ad39-467eb0428be0.raw
                                                                    • Size 605B
                                                                    • SHA256 b8ebd09ca21689a73c7abe9230dafa4f7b7b17c46286bef223abf9aa8d2f7adb
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0edd93cf-41c3-4dd8-ad39-467eb0428be0.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0edd93cf-41c3-4dd8-ad39-467eb0428be0.raw
                                                                    • Size 765B
                                                                    • SHA256 bca732d6737244e196cbf96332d17851f7e9f245c6bcb102d91df65cebc6eb5a
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0edd93cf-41c3-4dd8-ad39-467eb0428be0.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0edd93cf-41c3-4dd8-ad39-467eb0428be0.raw
                                                                    • Size 781B
                                                                    • SHA256 90b1d21661960c0947bdc2688e534a88fe6df786759621bb45fb4ec72dec8082
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0edd93cf-41c3-4dd8-ad39-467eb0428be0.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0edd93cf-41c3-4dd8-ad39-467eb0428be0.raw
                                                                    • Size 957B
                                                                    • SHA256 6ead46a1d736dad025a66d3a8926f468a1a13b4345b92a29c390a91611d170ce
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0edd93cf-41c3-4dd8-ad39-467eb0428be0.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0edd93cf-41c3-4dd8-ad39-467eb0428be0.raw
                                                                    • Size 1KB
                                                                    • SHA256 33ae0cb0445042984868158e4a4967ad619d266bb84573d415a46c328028ec88
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0edd93cf-41c3-4dd8-ad39-467eb0428be0.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0edd93cf-41c3-4dd8-ad39-467eb0428be0.raw
                                                                    • Size 1KB
                                                                    • SHA256 a61c190bc231dcafeb79935c12861bb4e3297fb702c1ab697ac14535fe1fccbb
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_0edd93cf-41c3-4dd8-ad39-467eb0428be0.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0edd93cf-41c3-4dd8-ad39-467eb0428be0.raw
                                                                    • Size 1KB
                                                                    • SHA256 f8e8e39cf6d2ea43811f4d05c4a5400163283a42b872983891cd2cecb7dbc7a3
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_24c8ff9c-2605-4db1-9212-f7587633844c.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_24c8ff9c-2605-4db1-9212-f7587633844c.raw
                                                                    • Size 637B
                                                                    • SHA256 02f308c76ecc4e1259e13b65555cd39b3a37c05a6261749fcad804198b28a6d4
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_24c8ff9c-2605-4db1-9212-f7587633844c.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_24c8ff9c-2605-4db1-9212-f7587633844c.raw
                                                                    • Size 637B
                                                                    • SHA256 27e243cc69867f8fa02e721ecc40299a3525c920ec5bb81156fdfdb0677633a1
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_24c8ff9c-2605-4db1-9212-f7587633844c.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_24c8ff9c-2605-4db1-9212-f7587633844c.raw
                                                                    • Size 797B
                                                                    • SHA256 ae952991446d16dabdb03d7748a5499af1c1cf92d2984c3ab70c4b4893f37b0d
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_24c8ff9c-2605-4db1-9212-f7587633844c.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_24c8ff9c-2605-4db1-9212-f7587633844c.raw
                                                                    • Size 621B
                                                                    • SHA256 bce6efc92d2271c376f81018ea9e0c90afff625b770f0307b314cad1f952ed75
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_24c8ff9c-2605-4db1-9212-f7587633844c.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_24c8ff9c-2605-4db1-9212-f7587633844c.raw
                                                                    • Size 637B
                                                                    • SHA256 458b8e3567dca54dcdebbd6fe34c48dc17d472a9ec4c3b361d76f0befd337c61
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_24c8ff9c-2605-4db1-9212-f7587633844c.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_24c8ff9c-2605-4db1-9212-f7587633844c.raw
                                                                    • Size 845B
                                                                    • SHA256 c0e0a6c382374ffe1377078d7af65b3eb8740cedd7029d95ebf26baceaa55d05
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    session_24c8ff9c-2605-4db1-9212-f7587633844c.raw
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_24c8ff9c-2605-4db1-9212-f7587633844c.raw
                                                                    • Size 493B
                                                                    • SHA256 262824f4d4f4e9826d4d30be037ff03284d8a04356aacfbbfe790a1b4f80a5d6
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    CURRENT
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\CURRENT
                                                                    • Size 16B
                                                                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                    • MD5 SHA1 SHA512
                                                                    Submit Download

                                                                    a6c3ed30-0ccb-4acd-a59e-37bd12c48df5.tmp
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\a6c3ed30-0ccb-4acd-a59e-37bd12c48df5.tmp
                                                                    • Size 608KB
                                                                    • SHA256 d732bccbd67fb6dbe44278a8302a713ce4152dba23c45e702a55d1eb84c214c5
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    fa032f31-647b-4c58-894c-b67544911148.tmp
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\fa032f31-647b-4c58-894c-b67544911148.tmp
                                                                    • Size 456B
                                                                    • SHA256 11f8676c1f3b9acec661384b01267253aa5ee0360b39f3a6d1cf91cd7b9cbfe6
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    ffd10488-dcc3-4a7c-9843-92269fdad615.tmp
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ffd10488-dcc3-4a7c-9843-92269fdad615.tmp
                                                                    • Size 2B
                                                                    • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                    • MD5 SHA1 SHA512
                                                                    Submit Download

                                                                    ssdfp2584.0.440603040
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2584.0.440603040
                                                                    • Size 2KB
                                                                    • SHA256 c34cc4985838e38108fa207b365b3aa63b7c8641cedcd677c0b43e2fe3f92eae
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    ssdfp2584.0.440603040
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2584.0.440603040
                                                                    • Size 1KB
                                                                    • SHA256 5544b8084c2017a6e1d2583014319d49aef0fd7a728e3d802430246bf03b4c3c
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    ssdfp2584.0.440603040
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2584.0.440603040
                                                                    • Size 265B
                                                                    • SHA256 b61bdbed09b58651819031a8b48e4abead4d47d6710dd555054c863766e8dee6
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    ssdfp5216.0.1419039498
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.0.1419039498
                                                                    • Size 3KB
                                                                    • SHA256 8da3d8cf9c57a8f6a8ebc0befc11b2d9c1995ccf27d71325e4c5d5e73d29b178
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    ssdfp5216.0.1419039498
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.0.1419039498
                                                                    • Size 4KB
                                                                    • SHA256 a4858805050ae2cc92ae78f9ae0e1a39b19d0b76c3e8e08b0c1874afe18fb904
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    ssdfp5216.0.1419039498
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.0.1419039498
                                                                    • Size 4KB
                                                                    • SHA256 f43f2ee0ef0d029b81937a36d96b4c05356ed80347d3de8f70bba93be9729ac3
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    ssdfp5216.0.1419039498
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.0.1419039498
                                                                    • Size 4KB
                                                                    • SHA256 92077eab35732941e2981bd3c03bf235a7a7a1bc7259df4a07885ffb841e78a2
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    ssdfp5216.0.1419039498
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.0.1419039498
                                                                    • Size 4KB
                                                                    • SHA256 abbee0250224ec0bb89a13a3f29bebcfc9657d6081829b7cf7c15732e11919e3
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    ssdfp5216.0.1419039498
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.0.1419039498
                                                                    • Size 4KB
                                                                    • SHA256 3f4ecb75ea311e6c900d2a17f9eec7e4815d54a122ecc13b07f8dfb9267f9808
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    ssdfp5216.0.1419039498
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.0.1419039498
                                                                    • Size 4KB
                                                                    • SHA256 a60493f5889dd9d25242e219b773b51822644745acdd7e3a978282d9a49ddf79
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    ssdfp5216.0.1419039498
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.0.1419039498
                                                                    • Size 737B
                                                                    • SHA256 f5034365bdd2fe8b355e83f777d4b2248b5b5177b75b16d08f56f5cfa337f79a
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    ssdfp5216.0.1419039498
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.0.1419039498
                                                                    • Size 824B
                                                                    • SHA256 3bf8dd5cf3d22c291cab580c087a455d538263dbb435c4a8999c5d674da812d8
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    ssdfp5216.0.1419039498
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.0.1419039498
                                                                    • Size 918B
                                                                    • SHA256 e512587177f66d4044f0b9002fbf403632a5840d4871adfbaab9f38eb376353b
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    ssdfp5216.0.1419039498
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.0.1419039498
                                                                    • Size 1KB
                                                                    • SHA256 41808083a67532c0444d16650025d80c4923f5a8e38ea2e16deb6e0c92fbfe5d
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    ssdfp5216.0.1419039498
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.0.1419039498
                                                                    • Size 1KB
                                                                    • SHA256 aa0493d3fe46fd91f819f197198693fe14d60fb5adceabb5bcd914ca422adbe3
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    ssdfp5216.0.1419039498
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.0.1419039498
                                                                    • Size 2KB
                                                                    • SHA256 aa893604657e4f031e980dbbd7a0b3c8837fa4be3399476174ff6c9326e772ab
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    ssdfp5216.0.1419039498
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.0.1419039498
                                                                    • Size 4KB
                                                                    • SHA256 718396cc995dac6e6d6a1e2c85ca744d988ed78ae3f7db0e406ec69a38a282ee
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    ssdfp5216.0.1419039498
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.0.1419039498
                                                                    • Size 1014B
                                                                    • SHA256 749e28d33b4d0c8e2f0e3de784a56b503588c2ebc19728364942ed7bbce59401
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    ssdfp5216.0.1419039498
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.0.1419039498
                                                                    • Size 1KB
                                                                    • SHA256 73c8d32bc8cf3ffd34dc395cb266f82809bd668661e258fa7fd2df01c11f8ac3
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    ssdfp5216.0.1419039498
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.0.1419039498
                                                                    • Size 1KB
                                                                    • SHA256 ca8652e95e1f988300cef2b0ef20f095889f4d1211881f2ee954e2c2ea6272c2
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    ssdfp5216.0.1419039498
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.0.1419039498
                                                                    • Size 1KB
                                                                    • SHA256 754e7e685f49c399088e3e09c8c565fe665eae19cfdb72ce4eea76cc0d557de7
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    ssdfp5216.0.1419039498
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.0.1419039498
                                                                    • Size 1KB
                                                                    • SHA256 1d0b497db801b68899143594f88633c334145f3be71679eb8a1d21b0681bd6ee
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    ssdfp5216.0.1419039498
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.0.1419039498
                                                                    • Size 647B
                                                                    • SHA256 53533d1f7a19cff7d56ff88d5635466d38c622dc9bf3b8c634ef4e2ed2979530
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    ssdfp5216.0.1419039498
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.0.1419039498
                                                                    • Size 549B
                                                                    • SHA256 8b56bb7eb2b34d7d01a73a58d3256bc9d9bbad4d8a7ad2f3f85136cfeb3287a7
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    ssdfp5216.0.1419039498
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.0.1419039498
                                                                    • Size 1KB
                                                                    • SHA256 2f27daa1d7e4a988ec979095b19d401fd8b025165284afe240ca0d8276f0e6ed
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    ssdfp5216.1.1413397754
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.1.1413397754
                                                                    • Size 200B
                                                                    • SHA256 a19c3a52dda1df143714afe5319c3f4330b99863e2bb6d0b3dee0d68df434b13
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    ssdfp5216.1.1413397754
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5216.1.1413397754
                                                                    • Size 249B
                                                                    • SHA256 b81d13fb404978b3c57fd7c3cd7a0e4ec05649b9eab43f4d116b68db58a4eee9
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    ssdfp6892.0.603483349
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.603483349
                                                                    • Size 1KB
                                                                    • SHA256 1ba299a805d875ad6ad4685e17edf1e8521a6deefe32b803e359fb6bcfa61bfc
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    ssdfp6892.0.603483349
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.603483349
                                                                    • Size 265B
                                                                    • SHA256 f04bbefc36ae8db9047219b4a3bf01999a472918a1dbded47f438d95887107ea
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    ssdfp6892.0.603483349
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.603483349
                                                                    • Size 2KB
                                                                    • SHA256 411506f209f91bb84f5a2d87e114044b72f30def289da8143e1b20f849e2c20f
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    data_1
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
                                                                    • Size 264KB
                                                                    • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                    • MD5 SHA1 SHA512 SSDEEP
                                                                    Submit Download

                                                                    Local State
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                    • Size 5KB
                                                                    • SHA256 71e19fd6d2174fba3704081a114ccc5b40745f74abdd98717a1efd3ec7ee54f8
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    Local State
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                    • Size 2KB
                                                                    • SHA256 03254524e42bfff0fadf34207324306c8472412715a1f88a72314aaaae947ce2
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    Local State
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                    • Size 5KB
                                                                    • SHA256 debcc17416100a9115984ba00a863b5290c3d18d568f59b0083257f9e2d765fe
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    Local State
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                    • Size 3KB
                                                                    • SHA256 ce1d16d1981db0492f31c769a26c9d07724e87e0f3d95d1e60b8b0e012b9e500
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    assistant_prefs.json
                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
                                                                    • Size 151B
                                                                    • SHA256 121140a0c1549c8145bfbd359861affd8a2ae1946447d63f913a61b52d2a0ae6
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    opera-one.jpg
                                                                    • Path C:\Windows\SystemTemp\scoped_dir5216_1166052815\opera-one.jpg
                                                                    • Size 194KB
                                                                    • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    persona.ini
                                                                    • Path C:\Windows\SystemTemp\scoped_dir5216_1166052815\persona.ini
                                                                    • Size 207B
                                                                    • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    opera-one-dark.jpg
                                                                    • Path C:\Windows\SystemTemp\scoped_dir5216_1439632727\opera-one-dark.jpg
                                                                    • Size 349KB
                                                                    • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                    Submit Download

                                                                    persona.ini
                                                                    • Path C:\Windows\SystemTemp\scoped_dir5216_1439632727\persona.ini
                                                                    • Size 217B
                                                                    • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                                                    • MD5 SHA1 SHA512 TLSH
                                                                    Submit Download

                                                                    memory/1344-527-0x00007FFCC93C0000-0x00007FFCC93C1000-memory.dmp
                                                                    Download

                                                                    memory/1344-528-0x00007FFCC93D0000-0x00007FFCC93D1000-memory.dmp
                                                                    Download