20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7

Analysis

user interaction
yes
max time kernel
121s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 06:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
OperaInstaller (2).exe
Size 178KB
Sample260809-gvrtdsha68
SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
MD5 4ef32b114eaa6f05340b46d0f48154c7
SHA1 a07219dc2a0fa96f5f9a03b1bb350c9ab2679d3f
SHA512 6631937f30fcfdc536bd14735870c9c4592f4414e9c1d71ec69c718bf341ff286174b782c6a23a6c29744be940bcac34aa93845e60727e090bee8423d738ea9d
SSDEEP 3072:IYHHEa1Lz5KhEwh5kc9+5sFoq0X/r6LGV4RxJ0OZnS+Rl//bRRlTHGVJp99vqRy:IYEwP5KhVyc9esFoBvum4RvGJTEy
TLSH
T1EB046B823AC184B5E5B244321864DBB19A7DFC700F65D9DB73987A3B5DB02C09932F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery persistence privilege_escalation spyware stealer

Malware Config

Signatures

Downloads MZ/PE file 2 IoCs

flow	pid	Process
7	4944	OperaInstaller (2).exe
19	960	installer.exe

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Executes dropped EXE 32 IoCs

pid	Process
5436	OpInst.exe
960	installer.exe
4844	installer.exe
3372	installer.exe
912	installer.exe
5716	installer.exe
2596	Assistant_130.0.5847.41_Setup.exe_sfx.exe
4796	assistant_installer.exe
2732	assistant_installer.exe
3380	installer.exe
2280	installer.exe
864	opera.exe
5632	opera_crashreporter.exe
2768	opera.exe
2292	opera.exe
4892	opera.exe
5040	opera.exe
4120	opera.exe
124	opera.exe
6132	opera.exe
4684	opera.exe
4544	opera.exe
3864	opera_crashreporter.exe
5932	opera.exe
3500	opera.exe
1252	opera.exe
6692	opera.exe
6708	opera_crashreporter.exe
6876	opera.exe
6884	opera.exe
6996	opera.exe
1036	opera.exe

Loads dropped DLL 48 IoCs

pid	Process
4796	assistant_installer.exe
4796	assistant_installer.exe
2732	assistant_installer.exe
2732	assistant_installer.exe
864	opera.exe
864	opera.exe
2768	opera.exe
2768	opera.exe
2292	opera.exe
2292	opera.exe
4892	opera.exe
5040	opera.exe
4892	opera.exe
5040	opera.exe
4120	opera.exe
4120	opera.exe
124	opera.exe
124	opera.exe
2292	opera.exe
6132	opera.exe
6132	opera.exe
2292	opera.exe
2292	opera.exe
2292	opera.exe
2292	opera.exe
4684	opera.exe
4684	opera.exe
4544	opera.exe
4544	opera.exe
5932	opera.exe
5932	opera.exe
3500	opera.exe
3500	opera.exe
1252	opera.exe
1252	opera.exe
6692	opera.exe
6692	opera.exe
6876	opera.exe
6876	opera.exe
6996	opera.exe
6884	opera.exe
6996	opera.exe
6884	opera.exe
6884	opera.exe
6884	opera.exe
6884	opera.exe
1036	opera.exe
1036	opera.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000\Software\Microsoft\Windows\CurrentVersion\Run\Opera Stable = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" --autostart"	opera.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000\Software\Microsoft\Windows\CurrentVersion\Run\Opera Stable = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" --autostart"	opera.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Enumerates connected drives 3 TTPs 6 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\F:	installer.exe
File opened (read-only)	\??\E:	installer.exe
File opened (read-only)	\??\F:	installer.exe
File opened (read-only)	\??\E:	installer.exe
File opened (read-only)	\??\F:	installer.exe
File opened (read-only)	\??\E:	installer.exe

Drops file in Windows directory 6 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\scoped_dir864_1876871703\opera-one.jpg	opera.exe
File created	C:\Windows\SystemTemp\scoped_dir864_1876871703\persona.ini	opera.exe
File created	C:\Windows\SystemTemp\scoped_dir864_531266126\opera-one-dark.jpg	opera.exe
File created	C:\Windows\SystemTemp\scoped_dir864_531266126\persona.ini	opera.exe
File created	C:\Windows\SystemTemp\scoped_dir6692_1462887955\opera-one.jpg	opera.exe
File created	C:\Windows\SystemTemp\scoped_dir6692_1462887955\persona.ini	opera.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	OperaInstaller (2).exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	OpInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Assistant_130.0.5847.41_Setup.exe_sfx.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	assistant_installer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	assistant_installer.exe

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2768	opera.exe
6876	opera.exe
3732	opera.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	opera.exe

Enumerates system info in registry 2 TTPs 41 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	installer.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	installer.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	assistant_installer.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	installer.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	installer.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	assistant_installer.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	installer.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	installer.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe

Modifies registry class 48 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\.xhtml	installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\.xhtml\OpenWithProgIDs\OperaStable = "0"	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Applications\opera.exe\shell\open	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\OperaStable\shell	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\.pdf\OpenWithProgIDs	installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\.pdf\OpenWithProgIDs\OperaStable = "0"	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\.shtml	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\.xht\OpenWithProgIDs	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Applications	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\WOW6432Node	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\WOW6432Node\CLSID	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\OperaStable\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe,0"	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\OperaStable\shell\open\ddeexec\Topic	installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\.opdownload\OpenWithProgIDs\OperaStable = "0"	installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\.htm\OpenWithProgIDs\OperaStable = "0"	installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\.xht\OpenWithProgIDs\OperaStable = "0"	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32\ServerExecutable = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\134.0.5954.46\\notification_helper.exe"	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\OperaStable\FriendlyTypeName = "Opera Web Document"	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\OperaStable\DefaultIcon	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\OperaStable\shell\open\ddeexec\Topic\	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\.pdf	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Applications\opera.exe\shell\open\command	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\OperaStable\URL Protocol	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\OperaStable\shell\open\ddeexec\Application\	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\.html\OpenWithProgIDs	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\.xht	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Applications\opera.exe	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Applications\opera.exe\shell	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Applications\opera.exe\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" \"%1\""	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\134.0.5954.46\\notification_helper.exe\""	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\OperaStable\shell\open\ddeexec\	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\OperaStable\shell\open\ddeexec\Application	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\.htm\OpenWithProgIDs	installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\.html\OpenWithProgIDs\OperaStable = "0"	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\.shtml\OpenWithProgIDs	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\OperaStable	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\OperaStable\shell\open	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\OperaStable\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" -noautoupdate -- \"%1\""	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\.opdownload\OpenWithProgIDs	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\.opdownload	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\.htm	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\.xhtml\OpenWithProgIDs	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\OperaStable\shell\open\command	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\OperaStable\shell\open\ddeexec	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\.html	installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\.shtml\OpenWithProgIDs\OperaStable = "0"	installer.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
864	opera.exe
864	opera.exe
864	opera.exe
864	opera.exe

Suspicious use of AdjustPrivilegeToken 6 IoCs

description	pid	Process
Token: SeShutdownPrivilege	864	opera.exe
Token: SeCreatePagefilePrivilege	864	opera.exe
Token: SeShutdownPrivilege	864	opera.exe
Token: SeCreatePagefilePrivilege	864	opera.exe
Token: SeShutdownPrivilege	864	opera.exe
Token: SeCreatePagefilePrivilege	864	opera.exe

Suspicious use of WriteProcessMemory 31 IoCs

description	pid	Process	procid_target
PID 4944 wrote to memory of 5436	4944	OperaInstaller (2).exe	88
PID 5436 wrote to memory of 960	5436	OpInst.exe	89
PID 960 wrote to memory of 4844	960	installer.exe	90
PID 960 wrote to memory of 3372	960	installer.exe	92
PID 960 wrote to memory of 912	960	installer.exe	93
PID 912 wrote to memory of 5716	912	installer.exe	94
PID 960 wrote to memory of 2596	960	installer.exe	96
PID 960 wrote to memory of 4796	960	installer.exe	97
PID 4796 wrote to memory of 2732	4796	assistant_installer.exe	98
PID 912 wrote to memory of 3380	912	installer.exe	107
PID 3380 wrote to memory of 2280	3380	installer.exe	108
PID 3380 wrote to memory of 864	3380	installer.exe	109
PID 864 wrote to memory of 5632	864	opera.exe	111
PID 864 wrote to memory of 2768	864	opera.exe	112
PID 864 wrote to memory of 2292	864	opera.exe	113
PID 864 wrote to memory of 4892	864	opera.exe	114
PID 864 wrote to memory of 5040	864	opera.exe	115
PID 864 wrote to memory of 4120	864	opera.exe	116
PID 864 wrote to memory of 124	864	opera.exe	117
PID 864 wrote to memory of 5932	864	opera.exe	118
PID 864 wrote to memory of 6132	864	opera.exe	119
PID 864 wrote to memory of 4684	864	opera.exe	159
PID 4544 wrote to memory of 3864	4544	opera.exe	123
PID 864 wrote to memory of 3500	864	opera.exe	124
PID 864 wrote to memory of 1252	864	opera.exe	125
PID 3380 wrote to memory of 6692	3380	installer.exe	126
PID 6692 wrote to memory of 6708	6692	opera.exe	127
PID 6692 wrote to memory of 6884	6692	opera.exe	128
PID 6692 wrote to memory of 6876	6692	opera.exe	129
PID 6692 wrote to memory of 6996	6692	opera.exe	130
PID 3380 wrote to memory of 1036	3380	installer.exe	131

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\OperaInstaller (2).exe
"C:\Users\Admin\AppData\Local\Temp\OperaInstaller (2).exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4944
- C:\Users\Admin\AppData\Local\Temp\OpInst.exe
  "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:5436
- - C:\Users\Admin\AppData\Local\Temp\7zSC352D999\installer.exe
    C:\Users\Admin\AppData\Local\Temp\7zSC352D999\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
    3⤵
    - Downloads MZ/PE file
    - Executes dropped EXE
    - Enumerates connected drives
    - Enumerates system info in registry
    - Suspicious use of WriteProcessMemory
    PID:960
  - - C:\Users\Admin\AppData\Local\Temp\7zSC352D999\installer.exe
      C:\Users\Admin\AppData\Local\Temp\7zSC352D999\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x2b4,0x2b8,0x2bc,0x288,0x2c0,0x7ff63077ad88,0x7ff63077ad94,0x7ff63077ada0
      4⤵
      Executes dropped EXE
      PID:4844
  - - C:\Users\Admin\AppData\Local\Temp\.opera\f8274ee1-bfec-43d0-8cf2-57635c70cce1 Opera Installer Temp\installer.exe
      "C:\Users\Admin\AppData\Local\Temp\.opera\f8274ee1-bfec-43d0-8cf2-57635c70cce1 Opera Installer Temp\installer.exe" --version
      4⤵
      Executes dropped EXE
      PID:3372
  - - C:\Users\Admin\AppData\Local\Temp\7zSC352D999\installer.exe
      "C:\Users\Admin\AppData\Local\Temp\7zSC352D999\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=960 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\f8274ee1-bfec-43d0-8cf2-57635c70cce1 Opera Installer Temp\opera_package_20260809070814" --session-guid=7c9233a0-33a9-4699-8b8a-ec9736004aec --server-tracking-blob=NzM5ZjM2YjIyMjBkNWQ5MzI5NWU0ZmU4YmMwMjdiZDNmMmU5NjY5MDQzNmYxODgxMTZlZGViYjVmYzdhMTRkNTp7ImNvdW50cnkiOiJHQiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijp7Im5hbWUiOiJvcGVyYSJ9LCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fc291cmNlPXdyayZ1dG1fbWVkaXVtPXBiJnV0bV9jYW1wYWlnbj1zcG90aWZ5X29wZXJhIiwic3lzdGVtIjp7InBsYXRmb3JtIjp7ImFyY2giOiJ4ODZfNjQiLCJvcHN5cyI6IldpbmRvd3MiLCJvcHN5cy12ZXJzaW9uIjoiMTEiLCJwYWNrYWdlIjoiRVhFIn19LCJ0aW1lc3RhbXAiOiIxNzg2MjU1NjkwLjY1OTkiLCJ1c2VyYWdlbnQiOiJPcGVyYSBJbnN0YWxsZXIvMS4wIiwidXRtIjp7ImNhbXBhaWduIjoic3BvdGlmeV9vcGVyYSIsIm1lZGl1bSI6InBiIiwic291cmNlIjoid3JrIn0sInV1aWQiOiI1OGRmNzkwMS1iNmFjLTRlYjgtYTAyOC1mZTE0MWVkM2RmMjcifQ== --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=D407000000000000
      4⤵
      Executes dropped EXE
      Enumerates connected drives
      Enumerates system info in registry
      Suspicious use of WriteProcessMemory
      PID:912
    - - C:\Users\Admin\AppData\Local\Temp\7zSC352D999\installer.exe
        
        C:\Users\Admin\AppData\Local\Temp\7zSC352D999\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x2ac,0x2b0,0x2c0,0x288,0x2c4,0x7ff63077ad88,0x7ff63077ad94,0x7ff63077ada0
        5⤵
        Executes dropped EXE
        
        PID:5716
    - - C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\installer.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\installer.exe" --backend --initial-pid=960 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\f8274ee1-bfec-43d0-8cf2-57635c70cce1 Opera Installer Temp\opera_package_202608090708141" --session-guid=7c9233a0-33a9-4699-8b8a-ec9736004aec --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=134.0.5954.46
        5⤵
        Executes dropped EXE
        Enumerates connected drives
        Enumerates system info in registry
        Modifies registry class
        Suspicious use of WriteProcessMemory
        
        PID:3380
      - C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\installer.exe
        
        C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x2b4,0x2b8,0x2bc,0x294,0x2c0,0x7ff65c10ad88,0x7ff65c10ad94,0x7ff65c10ada0
        6⤵
        Executes dropped EXE
        
        PID:2280
      - C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\f8274ee1-bfec-43d0-8cf2-57635c70cce1 Opera Installer Temp\opera_package_202608090708141\de932af914ba00303d4a2778a383ac9c831101e2.crx"
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        Adds Run key to start application
        Drops file in Windows directory
        Checks processor information in registry
        Enumerates system info in registry
        Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        Suspicious use of AdjustPrivilegeToken
        Suspicious use of WriteProcessMemory
        
        PID:864
        
        C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe
        
        C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ff8f0baf0d0,0x7ff8f0baf0e0,0x7ff8f0baf0f0
        7⤵
        Executes dropped EXE
        
        PID:5632
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2092,i,15486418576631847531,11758025111168961927,524288 --field-trial-handle=1904,i,4135214022358997524,3365104857469772079,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,2659998277382032266,3105464337192437391,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2104 /prefetch:11
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        System Time Discovery
        Enumerates system info in registry
        
        PID:2768
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1668,i,12647833487330727423,15742474475190274195,262144 --field-trial-handle=1904,i,4135214022358997524,3365104857469772079,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,2659998277382032266,3105464337192437391,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1900 /prefetch:2
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        Enumerates system info in registry
        
        PID:2292
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2408,i,4525757339073259287,8179349907156223724,524288 --field-trial-handle=1904,i,4135214022358997524,3365104857469772079,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,2659998277382032266,3105464337192437391,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2692 /prefetch:13
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        Enumerates system info in registry
        
        PID:4892
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3352,i,14301442985402041211,12915513895888022484,2097152 --field-trial-handle=1904,i,4135214022358997524,3365104857469772079,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,2659998277382032266,3105464337192437391,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3784 /prefetch:9
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        Enumerates system info in registry
        
        PID:5040
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3340,i,3849171121574748800,11591615940935914742,2097152 --field-trial-handle=1904,i,4135214022358997524,3365104857469772079,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,2659998277382032266,3105464337192437391,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3756 /prefetch:9
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        Enumerates system info in registry
        
        PID:4120
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4056,i,13147764246359811145,72038913458356015,524288 --field-trial-handle=1904,i,4135214022358997524,3365104857469772079,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,2659998277382032266,3105464337192437391,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4032 /prefetch:14
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        Enumerates system info in registry
        
        PID:124
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4236,i,1568940624541206123,14704251445455756777,2097152 --field-trial-handle=1904,i,4135214022358997524,3365104857469772079,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,2659998277382032266,3105464337192437391,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4252 /prefetch:9
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        Enumerates system info in registry
        
        PID:5932
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3336,i,15028983571098693064,5342808006025526037,524288 --field-trial-handle=1904,i,4135214022358997524,3365104857469772079,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,2659998277382032266,3105464337192437391,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=2984 /prefetch:12
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        Enumerates system info in registry
        
        PID:6132
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5040,i,12303680294195374445,1493229421582028617,524288 --field-trial-handle=1904,i,4135214022358997524,3365104857469772079,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,2659998277382032266,3105464337192437391,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3036 /prefetch:14
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        Enumerates system info in registry
        
        PID:4684
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3792,i,12101307307498829903,10646061373464760526,524288 --field-trial-handle=1904,i,4135214022358997524,3365104857469772079,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,2659998277382032266,3105464337192437391,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=3732 /prefetch:14
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        Enumerates system info in registry
        
        PID:3500
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5344,i,876258889922301174,3402659920369115895,2097152 --field-trial-handle=1904,i,4135214022358997524,3365104857469772079,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,2659998277382032266,3105464337192437391,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=5400 /prefetch:1
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:1252
      - C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\f8274ee1-bfec-43d0-8cf2-57635c70cce1 Opera Installer Temp\opera_package_202608090708141\additional_file2.tmp"
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        Adds Run key to start application
        Drops file in Windows directory
        Checks processor information in registry
        Enumerates system info in registry
        Suspicious use of WriteProcessMemory
        
        PID:6692
        
        C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe
        
        C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ff8f0baf0d0,0x7ff8f0baf0e0,0x7ff8f0baf0f0
        7⤵
        Executes dropped EXE
        
        PID:6708
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1684,i,2146089989751454954,7285446934665918278,262144 --field-trial-handle=2032,i,4872091051691149632,2218659172498896206,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,6616402447554253345,3289352441344465061,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2028 /prefetch:2
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        Enumerates system info in registry
        
        PID:6884
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1936,i,10522106800949697086,3751262453837242352,524288 --field-trial-handle=2032,i,4872091051691149632,2218659172498896206,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,6616402447554253345,3289352441344465061,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2064 /prefetch:11
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        System Time Discovery
        Enumerates system info in registry
        
        PID:6876
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2396,i,13452279299131721680,16366393871151316272,524288 --field-trial-handle=2032,i,4872091051691149632,2218659172498896206,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,6616402447554253345,3289352441344465061,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3168 /prefetch:13
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        Enumerates system info in registry
        
        PID:6996
      - C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:1036
        
        C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe
        
        C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ff8f0baf0d0,0x7ff8f0baf0e0,0x7ff8f0baf0f0
        7⤵
        
        PID:6332
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1696,i,17059605729309645921,2512093608661476273,262144 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2044 /prefetch:2
        7⤵
        
        PID:4644
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1904,i,7177949062139213631,10426374849653684003,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2096 /prefetch:11
        7⤵
        System Time Discovery
        
        PID:3732
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2500,i,3644375479861643838,1299472049492160764,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2528 /prefetch:13
        7⤵
        
        PID:3396
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3168,i,16849277879360666871,5172714429099659739,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3180 /prefetch:14
        7⤵
        
        PID:4136
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3200,i,18436552563186302068,5466103365134825416,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3288 /prefetch:14
        7⤵
        
        PID:5604
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3212,i,2516793570354138784,16174261038398199496,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3296 /prefetch:14
        7⤵
        
        PID:5596
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3160,i,14853087893949605951,17430745568176320594,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3240 /prefetch:14
        7⤵
        
        PID:4332
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3224,i,3746585305262660636,12657926446090511284,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3280 /prefetch:14
        7⤵
        
        PID:2596
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3236,i,13553772089100903064,6273010899610561004,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3340 /prefetch:14
        7⤵
        
        PID:2792
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3272,i,1885274124613744399,11904456405093869690,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3360 /prefetch:14
        7⤵
        
        PID:5008
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3612,i,7195563561751064142,14501486297509621189,2097152 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3260 /prefetch:1
        7⤵
        
        PID:1640
        
        C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_gx_splash.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
        7⤵
        
        PID:4848
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4696,i,1522243740817972529,13553853897363341751,2097152 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4712 /prefetch:9
        7⤵
        
        PID:6676
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4872,i,7837004317996388293,17701833967974764952,2097152 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4876 /prefetch:1
        7⤵
        
        PID:6472
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5072,i,14296691615570991228,7993351236833994281,2097152 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5092 /prefetch:1
        7⤵
        
        PID:6620
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5208,i,17316658485957194437,15066343815618725738,2097152 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5252 /prefetch:1
        7⤵
        
        PID:3664
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5800,i,7634758551938293093,2097884589560066263,2097152 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6104 /prefetch:9
        7⤵
        
        PID:6688
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6880,i,16111795128027528675,2297674410840049749,2097152 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5640 /prefetch:9
        7⤵
        
        PID:6792
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6980,i,7536927278649150378,11244251071112129046,2097152 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6532 /prefetch:9
        7⤵
        
        PID:6824
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6936,i,4227500051317441688,11115503097388296526,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6600 /prefetch:12
        7⤵
        
        PID:1820
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6640,i,15952481568860787170,13537016232516612093,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7212 /prefetch:14
        7⤵
        
        PID:4968
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6500,i,10126606526800930369,9518046116459755967,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7172 /prefetch:14
        7⤵
        
        PID:4280
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6680,i,10533593343426166507,8504141021518323920,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7192 /prefetch:14
        7⤵
        
        PID:6040
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7596,i,12747363350239425749,1143029081938691613,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7556 /prefetch:14
        7⤵
        
        PID:5096
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7588,i,16718870975061538001,15505921865044413928,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7580 /prefetch:14
        7⤵
        
        PID:1884
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7268,i,8597062161742061926,8963475421506767274,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7624 /prefetch:14
        7⤵
        
        PID:4684
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7616,i,390417648999971891,15826469186488979807,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7868 /prefetch:14
        7⤵
        
        PID:5332
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8100,i,4027880897796665651,14430925091615624009,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8140 /prefetch:14
        7⤵
        
        PID:2204
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8132,i,15629832465525929519,11641751043355100924,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8200 /prefetch:14
        7⤵
        
        PID:616
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8124,i,6588212013428443860,10969241698635750674,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8160 /prefetch:14
        7⤵
        
        PID:6564
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8564,i,14700069262674335810,17197876224261605014,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8572 /prefetch:14
        7⤵
        
        PID:6488
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8536,i,4500859029230575564,6425489060725279235,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8544 /prefetch:14
        7⤵
        
        PID:6596
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8604,i,13856172952037645746,15371181440305336071,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8624 /prefetch:14
        7⤵
        
        PID:6644
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8952,i,12731137566630736402,15532332152868365146,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8960 /prefetch:14
        7⤵
        
        PID:6496
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=9008,i,16014200063095086951,2278780972525529381,2097152 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8972 /prefetch:9
        7⤵
        
        PID:6572
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9176,i,4283026024829486816,3675000404556364553,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9188 /prefetch:14
        7⤵
        
        PID:5848
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9028,i,5551593916077084121,5692365845108992073,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9016 /prefetch:14
        7⤵
        
        PID:2768
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9640,i,15349368831635451269,9785262481478138290,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9596 /prefetch:14
        7⤵
        
        PID:7072
        
        C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
        7⤵
        
        PID:2080
        
        C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
        
        C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x25c,0x260,0x264,0x238,0x268,0x7ff7413548d0,0x7ff7413548dc,0x7ff7413548e8
        8⤵
        
        PID:7380
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=9816,i,15382184947328474928,9431530511028151760,2097152 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=6852 /prefetch:1
        7⤵
        
        PID:4620
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10072,i,12541848129913299553,301316112615068803,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10168 /prefetch:14
        7⤵
        
        PID:7128
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10260,i,3316593711094852700,14715853942722720377,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10272 /prefetch:14
        7⤵
        
        PID:6212
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=10404,i,6874459748010551228,8788929248299228769,2097152 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=9984 /prefetch:1
        7⤵
        
        PID:7616
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10968,i,4757269115472709693,375351307421069163,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10976 /prefetch:14
        7⤵
        
        PID:7980
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11116,i,16301303750839658505,3281166118497383014,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11128 /prefetch:14
        7⤵
        
        PID:7992
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7500,i,17540382838584105723,13087953943244773089,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=7476 /prefetch:14
        7⤵
        
        PID:6632
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7388,i,13230740550886698261,10914628780672139374,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=7408 /prefetch:14
        7⤵
        
        PID:6556
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7348,i,91735320194393959,2958783514221206972,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=8432 /prefetch:14
        7⤵
        
        PID:4508
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9408,i,12154867252584055015,12524536435851486830,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=8912 /prefetch:14
        7⤵
        
        PID:7204
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11352,i,13232941294666773035,5869968889832463590,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=11364 /prefetch:14
        7⤵
        
        PID:7244
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11472,i,16126159310556603760,13619252747104003718,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=11484 /prefetch:14
        7⤵
        
        PID:7556
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11532,i,9968567004807113121,12320199140222881561,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=11544 /prefetch:14
        7⤵
        
        PID:7588
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7416,i,9010027359195989314,16294254272789260990,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=9368 /prefetch:14
        7⤵
        
        PID:8048
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11464,i,9802121580692870346,15976525268563923476,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=8604 /prefetch:14
        7⤵
        
        PID:8188
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11700,i,4656254846412434607,9595343279150351827,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=7376 /prefetch:14
        7⤵
        
        PID:1216
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=12004,i,1756243211354368022,16157195042025479070,2097152 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=11972 /prefetch:9
        7⤵
        
        PID:4292
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11756,i,8161275390606330739,9726066683805029541,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=12220 /prefetch:14
        7⤵
        
        PID:4624
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12300,i,4154729923194427575,15240638965936435942,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=12312 /prefetch:14
        7⤵
        
        PID:6880
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12568,i,14576963445872037070,5167192153491097477,524288 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=12580 /prefetch:14
        7⤵
        
        PID:3388
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=12796,i,15648985659285650531,8054847779230513308,2097152 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=12892 /prefetch:9
        7⤵
        
        PID:7284
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=13256,i,4767329166053157618,10441803626328686597,2097152 --field-trial-handle=1940,i,6165529495214571313,10839782836171253909,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2052,i,12203342532928479703,659026930168430454,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=13308 /prefetch:9
        7⤵
        
        PID:7956
  - - C:\Users\Admin\AppData\Local\Temp\.opera\f8274ee1-bfec-43d0-8cf2-57635c70cce1 Opera Installer Temp\opera_package_202608090708141\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
      "C:\Users\Admin\AppData\Local\Temp\.opera\f8274ee1-bfec-43d0-8cf2-57635c70cce1 Opera Installer Temp\opera_package_202608090708141\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"
      4⤵
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      PID:2596
  - - C:\Users\Admin\AppData\Local\Temp\.opera\f8274ee1-bfec-43d0-8cf2-57635c70cce1 Opera Installer Temp\opera_package_202608090708141\assistant\assistant_installer.exe
      "C:\Users\Admin\AppData\Local\Temp\.opera\f8274ee1-bfec-43d0-8cf2-57635c70cce1 Opera Installer Temp\opera_package_202608090708141\assistant\assistant_installer.exe" --version
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Enumerates system info in registry
      Suspicious use of WriteProcessMemory
      PID:4796
    - - C:\Users\Admin\AppData\Local\Temp\.opera\f8274ee1-bfec-43d0-8cf2-57635c70cce1 Opera Installer Temp\opera_package_202608090708141\assistant\assistant_installer.exe
        
        "C:\Users\Admin\AppData\Local\Temp\.opera\f8274ee1-bfec-43d0-8cf2-57635c70cce1 Opera Installer Temp\opera_package_202608090708141\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x334040,0x33404c,0x334058
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        
        PID:2732

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2396

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:1076

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:4544
- C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe
  C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ff8f0baf0d0,0x7ff8f0baf0e0,0x7ff8f0baf0f0
  2⤵
  - Executes dropped EXE
  PID:3864

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
"C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
1⤵
PID:6392
- C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
  C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x25c,0x260,0x264,0x258,0x268,0x7ff7413548d0,0x7ff7413548dc,0x7ff7413548e8
  2⤵
  PID:7872
- C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
  "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
  2⤵
  PID:8068

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
1⤵
PID:1296

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

8B2B9A00839EED1DFDCCC3BFC2F5DF12

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
Size 1KB
SHA256 63b14543360f5e89942ea8d5113526e64fbc71c1207328f0136b3a495d921dd0
MD5 adac67e1d2da2d706db151c2db316b2d
SHA1 5f6e301d23e33132209707945d0e740d5bcb8996
SHA512 9371b62ac25c6ea8fb6fca19ac47b873ced9b3d0cb45ce4de5ea974b93c12684c65aa23c7d83331c77502853258a08dff73ce5e3fb6170bd3ab1c5b3283a86a9
TLSH
T1DE31AD4EA2153027D5427F72D8CEBE83CEB1364667CAD46B18046E4229AAFC25FC80C9
MD5 SHA1 SHA512 TLSH

Submit Download

B46811C17859FFB409CF0E904A4AA8F8

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
Size 528B
SHA256 d2bb091268ade68ad8121d2184d0fbce128070156304bd4de312e6fbd267409c
MD5 047f3e9d21d6b325d592b1959e4362e6
SHA1 5aeef5f985171cd69da397fd039854e44ebecdd2
SHA512 4523896ed4a03afafd2075d8c8947236d34fe1da2c246a3f90c2be2a5c151c18bc58a6cde5a209abb8e06e80f662e24d0149640b3e98e8a872bfa8a04ef592a4
TLSH
T147F0500990082252C855FF55DFD6AC97DC76336136E595036D458E410C12F96AF950F5
MD5 SHA1 SHA512 TLSH

Submit Download

E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
Size 471B
SHA256 5ea73e46d4d2a45a24b689bd156e299ecf330317f54f087d1da238f060dc8ed2
MD5 b3da231c6d22b133cb9974e0b6927358
SHA1 30b6bf59f66bfb89b802cffe8e6f363d68b778b2
SHA512 28ec2ce730543f6d1b428d81c013926d72807f5897316f9c088ac1155f4e4cda5e084671d9806e2de8d2eea76c81ef3c1b119fd1727dd2448b5573827e2d67c6
TLSH
T1BEF0DCA268EEE8A56080C8AC25E145767816E02992A65142F01F04F08526AECAF3D536
MD5 SHA1 SHA512 TLSH

Submit Download

8B2B9A00839EED1DFDCCC3BFC2F5DF12

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
Size 174B
SHA256 543c81d38040457a4a626ca386c22b1bae88d490957e3a0edd9f6f123a661c77
MD5 247146070f52de13f888e95a9e1d917c
SHA1 e79f95aab728032350c81fa858bb96aafac9b010
SHA512 b5a607aeb36d2d7fa46daf1de30ccd74ab87cad8e13cca2eb40aaf589a359fa3f1b329a19dfa5a85525d3df0d4cb21af240df017377740680b7cfa7994da2b56
TLSH
T10EC09B1437B54259F1704E7F5A57531147FAF505CD4183540F745259C51DB425CF5D06
MD5 SHA1 SHA512 TLSH

Submit Download

B46811C17859FFB409CF0E904A4AA8F8

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
Size 170B
SHA256 32835375924a5c8c6c7934fb7d869fbd607068665ca09199f28494eefa038615
MD5 6bea3048a59ceda453e92319d603664d
SHA1 e4b02e889d2102a8bc2ec06a2faee4ef69782b36
SHA512 272e9e6f0bdf20eeb6f46b2e12d716c2f75e3d37d273d04543804ee01f5647c3f84d3ab857770fd3ccd0719c23b8f10c0e7dd698361c4704dea7301908f4944e
TLSH
T1CFC09B1473694715F10D213D7DD6171517B59205F5C6C7044B741134851C6400872D05
MD5 SHA1 SHA512 TLSH

Submit Download

E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
Size 416B
SHA256 f3c2c4b09f8a5129daf94e8a795ac6c1968e04a1804d5a651343288ec94ae167
MD5 7a253cb73fdb11303054d7d2d01f1efe
SHA1 6a36f715b9d9e9b23fdb9046c2cf946a63bf0b5a
SHA512 7447875809db99dce64383fed712b511dadcb3725adbd1826a5a1b8768b919e6ff70e2f16e6179163f0a8bc3e3ce70e361419e689703c17abe66ff8a360b7de5
TLSH
T1CBE0683515FA016EE1F4D4B44BDEBA224A9AF0220458A2B40EF427017207900AE12A35
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_0
Size 44KB
SHA256 9ba8026ce5d486cd32d946481c9aa59c8095459fd5aee848c94c28232d4e5110
MD5 4a90451145ccf0cc097e20eda159cb1c
SHA1 d3890b046c059a48b233bb3392e53be3d69b114f
SHA512 7fe4c0fde2fd0e6d5782b02cc8bff7e5fac24108116bd8dceecd74a1e9a89e1fe76641264d9d0adc8eacc2548b4366e8b03b99bb872ac69b0cbcc164b419a048
SSDEEP 3:MsFlTlrllkl2OIcfikNvZeSPfw3/l:/F02Sikxnw3
TLSH
T13B13927ED24105A7C1200032E4498EF0922081804191031304281B102801A8288C0038
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000001

Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
Size 162KB
SHA256 6b4f7134dc8de1a7f1cfe0d8333dc202ea4882de5d238747360f405b0d5fa2d6
MD5 6270408f1e8ff3486e4b0246238286f8
SHA1 72704e92a8ef65426a9c318045a1b6a00b28ad7b
SHA512 4d1fe1acbedb89aff457a1ff5bc95a5eb77c318c4f27e6fbf1303d0bbf291f8c9fc1e1f08b4dcb3f7e2953b8e8d6a0381e345cf1612f81d864381ac9cf205690
SSDEEP 3072:5kxjrnypYT1yO5sp358m/hQwIXHKR/pwkimg1DGGZeucIrDljwMnFD3pIg8BB:5kxnvT4O5A58y7CHKRBwDVSlucaxn1iJ
TLSH
T1B7F3125162A2F575CD7C8C252F8FADF7727B159F6829E0217F8364EA881338AE74814C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

134.0.5954.46.manifest

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\134.0.5954.46.manifest
Size 225B
SHA256 c864d0cb3827d9690c32a79d4226ecd0bf8ca7a1df1d9bffb38e00669f189aa8
MD5 565c55f49068193306d487c94d3b77d6
SHA1 b1c5ad9e62928b8690e376c923a9689e7536ac5a
SHA512 b797149e7dd707f82abdaf56e629316208e5fa85355c13a365d70cec581c5e45e91bb2953c2d55a106686f8d72c0ad2235611cc8268e5de4d4184e4404b98d14
TLSH
T1BAD0A901888A22096B2341A03CAAA0014118C767048CA04870FCB867BFB39A8A2928F2
MD5 SHA1 SHA512 TLSH

Submit Download

150x150Logo.scale-100.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\Assets\150x150Logo.scale-100.png
Size 1KB
SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
MD5 f4d70bc86e8544d7758742c2eba89d47
SHA1 5df4635794ab25e2f88bcf8ec39c19a09383a029
SHA512 d20cbd543bf97890d64c07f9e99188604f4dc5def904ad74229a3b1d9d9a06fff93af711c99a178799e9de472d930aa52a0c154f0d2953abe5ffc3cfd1708ab9
TLSH
T11811C840D668A4ECCCCD5DBAB2BC3893D7529C198049B1DB4CE1E8E38C303050976E0E
MD5 SHA1 SHA512 TLSH

Submit Download

150x150Logo.scale-100_contrast-white.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\Assets\150x150Logo.scale-100_contrast-white.png
Size 1KB
SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
MD5 7f69f89f11fd675b36e8de01de3c29ad
SHA1 b91e00e68889367de138ffa5e7fb3c9de2a18467
SHA512 06c162296c5ac62429e6e5dec07b836e6053cb4eb0291d8ed904f71cc42352c134870ed964517d2600f03fd7cf3821ee877ea83a330c9597fd7d629f9c2a6432
TLSH
T1081184F6422D2D1DF58532B16EE55FE299A82B2535D0BA425008C1194E2B512C900180
MD5 SHA1 SHA512 TLSH

Submit Download

150x150Logo.scale-140.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\Assets\150x150Logo.scale-140.png
Size 1KB
SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
MD5 a0076d9b3db9054267a7c86c9323aea1
SHA1 22b85aeec3e3804fe1f6e91d5a9ac1c6a0153b6c
SHA512 8fb750bddea61501f8ce2b0d0c27d29f322c9f297777f26b1401696c836c844369a9f6890bbb9827682deb70004cd98a973a0742d2d218f12a9fc3c301f10985
TLSH
T10121F84FCC2CE4E4CEDD49323C15A326A33021C950036F8A99CAD3F2876474C68B71D8
MD5 SHA1 SHA512 TLSH

Submit Download

150x150Logo.scale-140_contrast-white.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\Assets\150x150Logo.scale-140_contrast-white.png
Size 1KB
SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
MD5 f601df01a867a51514ea89ac9bfe9b86
SHA1 827cf9859b7b1864236cd1f03e8aa40758285e82
SHA512 2714e67298058e8fdad4459cfa17e2c7c67353bbfd9ea850bb403e669ae085ba579c31f7d64889470a97565719342e6a30efe2f66566783197194433aa947600
TLSH
T1DE21B45BA702048EC2065E3F4D54C81B6591FFAAA3B3DD4B265303B0A44217E18E76B4
MD5 SHA1 SHA512 TLSH

Submit Download

150x150Logo.scale-180.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\Assets\150x150Logo.scale-180.png
Size 1KB
SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
MD5 0a76f51f6169a31402ff7c61cfd05161
SHA1 843a32d6dc0d5b9d97c5f475f96e49852823a103
SHA512 7056949d7aa9cc4c96f9c13d656cfffa9f9a49ca78f6be3037cd38cc1d8712917cc235099f24723bba26fc9ffdba015480309d0418961c1116dbe7b65de6301f
TLSH
T14A31D8C629E310F9F9FC01F501126A6CD7C095D41162215B68CADDB42CB37257BB90A5
MD5 SHA1 SHA512 TLSH

Submit Download

150x150Logo.scale-180_contrast-white.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\Assets\150x150Logo.scale-180_contrast-white.png
Size 1KB
SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
MD5 67a0163cd9753e42360222a17173f593
SHA1 e4ee5c2288cbd5d354aad1905b917285a3daeb92
SHA512 87e69e15ba6dee402dbe5a90da864136ec2c6884c204a567ad461e0181e70514f73a7df22a47de63d4829fa937e56fc4c08cb6c5268313f7b9af1e7217d81f47
TLSH
T10F313C6F5D568577E37C42BCBA7085F5D325B31C400727106F34B2983814E5521A89CD
MD5 SHA1 SHA512 TLSH

Submit Download

150x150Logo.scale-80.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\Assets\150x150Logo.scale-80.png
Size 827B
SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
MD5 95a8f1834d8da00ad94c0cf2aa09853c
SHA1 7e830e3ef55b4d7b9a18ec8c151bebb2c28f0069
SHA512 c89be6e503c26efd4eec12c77e091570e187ff64928cab01f6f873d9ca3769f019a1724f76b57c9d4038495e29cc4106f919082913323af1ece7aff820c828f1
TLSH
T16C0120FB28489DD0CEE79271529CC55D9BC259065A80D0F7D2E9D8C05D33B49E678810
MD5 SHA1 SHA512 TLSH

Submit Download

150x150Logo.scale-80_contrast-white.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\Assets\150x150Logo.scale-80_contrast-white.png
Size 799B
SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
MD5 3015766c5ca769e54009f167550f7389
SHA1 0eff02455a1e0fa1724bb1d4333c3d24329f9e9a
SHA512 7ea7495163e0246f78f88dfd0ee72b8584108c286227d70cec9de125747f21f2618f46f7197f7cb9c0f40d297bcc3582cf70f54ebf7f9eb10941fbaa6bf0149b
TLSH
T17B010AC8D032EEA5D91788F36CA24FD59CEF42F000181B2C84A880913C030D6B03ECA5
MD5 SHA1 SHA512 TLSH

Submit Download

70x70Logo.scale-100.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\Assets\70x70Logo.scale-100.png
Size 781B
SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
MD5 ef710f4543a25076078fbc1c09ec9e2c
SHA1 e4ea1c2cb24cfff03569dab28877d11f9c6cfc74
SHA512 fc979d06806a69da71336533d96b1cb66b227064a224e23c6f5bf9d1fe4e85a9d9546643ce296ba5f04c025284d5ca2c445c52695aae669735a2a5b48ce07a00
TLSH
T122016002E621E8FADFDE023E322C446D4725035AA706BA1F00C6F8A72EF0B4820B7049
MD5 SHA1 SHA512 TLSH

Submit Download

70x70Logo.scale-100_contrast-white.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\Assets\70x70Logo.scale-100_contrast-white.png
Size 752B
SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
MD5 ae8eecb8db4d20efbd816b887ef75840
SHA1 1d0cc741d0a75e5e8ab51dd8b6a99f5e679ef5db
SHA512 0cb71eb86ab2c5d4c70f04d7b10736aa453d51b56723ed7c9dc332f92ea428eb7861f23da2e30416bea8cc59877ba2c87f3032ea473028a7df8c6a299d517572
TLSH
T13501B5E19CA5D03C9D59ACB03820317AFFBF65062CA02F825474762B2010CB538E50CF
MD5 SHA1 SHA512 TLSH

Submit Download

70x70Logo.scale-140.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\Assets\70x70Logo.scale-140.png
Size 991B
SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
MD5 9590b4bd9378a2d8706dcbdc630fae8a
SHA1 751eb2aa5ce4e83133a73fdb9efffc013bf37ec8
SHA512 b2666efa916584c9b090e305eda116f2a90c58862fa36a0963176b09b493a4ce5e601a178c74be0f2e59811ad42cd1d5747e8a45ea07c3f5d52b28e177fa5603
TLSH
T13C118820BE023DEDEAD89D14E139505E86042902332860CBA0E5D4908EBE79044F095D
MD5 SHA1 SHA512 TLSH

Submit Download

70x70Logo.scale-140_contrast-white.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\Assets\70x70Logo.scale-140_contrast-white.png
Size 865B
SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
MD5 9b103e9dfc26dd4d837df8ab55ec4fb8
SHA1 6f46830a3a63e0eec923bccfad57d8391ac3e559
SHA512 e8023067638a9fb849ac9364a45c8be9a6dd325fbc704d960cf270ce1075ac6c9d57b7f96cae62985e92e5543dc2f2a43d473a2dcb0060af067cd474aab7e59a
TLSH
T103118AFB1644C6ED594F572F50DA9C51734B8A3B836E80189A3C869CD190F44CB77ED1
MD5 SHA1 SHA512 TLSH

Submit Download

70x70Logo.scale-180.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\Assets\70x70Logo.scale-180.png
Size 1KB
SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
MD5 7ab03a8ba1c0243b96c4124cd5341073
SHA1 7de490dd37ebed58337fc0db654f12398e84a78a
SHA512 c96846f008e8ab440009bf2442a2cb9db3d24452619c8c2b669395f971f9a316ec62693bb586a94e565f1cab893bf665112c34cc1fa46319e571e3fb4d2fc41d
TLSH
T18021E7612B26DDFBD7C182F1913B4A395E1CD582327461369CC2E1623C3772E1271248
MD5 SHA1 SHA512 TLSH

Submit Download

70x70Logo.scale-180_contrast-white.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\Assets\70x70Logo.scale-180_contrast-white.png
Size 1KB
SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
MD5 1521be4b8c8f2e0ce20a89f163de3909
SHA1 c291448b74fc3d7060c1df4b35026084981ee441
SHA512 6a0781d275dbf8fad4ee464e759de74399918abdc99cef3c74e5d66a0d555a8bed363da964c15e2ad9ab3cde5a17d537bbcbadb10585aa1ef50f0b614fc39a50
TLSH
T1E011BB5771622D70C791577F5868F505DC72D33134A18DCB5CDF29ABD0C62B4449C242
MD5 SHA1 SHA512 TLSH

Submit Download

70x70Logo.scale-80.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\Assets\70x70Logo.scale-80.png
Size 590B
SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
MD5 1b4ff26a106929e3a5710900a9d984e7
SHA1 d3e1bb4fa64083743ab56ecd89d586df6b583bce
SHA512 d8537fa3b0da1b2ee7c8cfbe9101a7dca624af4532305e06f211e4dac799ae9b533f19d3cdf052352e2a926bfe32cc908cd3944b2543010e7baefe52697add92
TLSH
T11EF0E16019445CD54FED19969A3D4F30EE5034155813BCA70DC2D8369E2634598B260D
MD5 SHA1 SHA512 TLSH

Submit Download

70x70Logo.scale-80_contrast-white.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\Assets\70x70Logo.scale-80_contrast-white.png
Size 519B
SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
MD5 169dc90309162bbabf07ac3d954a076f
SHA1 a4c87f029a4f34d66847271cdf8c5e73b1e48a90
SHA512 b7633c8faa5614efb402c47957577dbacca1a1b3fd0bb39cf79eb3a06ec6a55f9b8c5ee9569271efbfd7d43ad348d275c0c6c9faf840663268bca2fbc6c64bb7
TLSH
T1D9F075C360D1ED222EBA2004E411ECFC747A11985B439885003B48BF7F77F20A90B088
MD5 SHA1 SHA512 TLSH

Submit Download

assistant_package

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\assistant_package
Size 3.6MB
SHA256 bcf1751bd4a26fbf8a66570da26e75993470b69e737950fc294cdb48d5269742
MD5 dce412b92d695557acda2870a79c1d29
SHA1 8a0c4b8ed4c292526c44d8ae69202217e2f4f5b2
SHA512 effa04d0d3fbdc24fb8ee4c8fa920e7d0f7d11aee4069703a48c47cb24dc3d17ccffda26f252d0f220efdb1c43cc43981265d90e61dc2aedea9334fb448ea4b8
SSDEEP 98304:DkiokFwKFIgGvsxiGNBJCM5AGvMnjU5+jBqtfAPylt:Dh+AbViGNByUc1q4Pylt
TLSH
T1350633217AA488B0E75249330EC1F2F96FBEF2710972969F3398076E9E61581D319377
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\d3dcompiler_47.dll
Size 4.5MB
SHA256 dad8b0a7e85794de57e0adf71176ac9d0dcc7dd50082ee3a22b8c0608bc16c9b
MD5 bc3ab796d20f09f5e4f623ebd56ab89c
SHA1 261f965110610871b8401ee7bac874cbbbf723d2
SHA512 ab3524f04acbea21d30dcf04a43fc51adc471000a38b68dd3043b9a6aaef6001b0a4c41fd24250eaffce037670f69f2ecb2b317ec2f4b0417833735cee9b1129
SSDEEP 49152:K6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/M:KUdeqt737jFm5wk
TLSH
T13D268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxcompiler.dll

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\dxcompiler.dll
Size 24.5MB
SHA256 551848db9629fe944783c63af7209bdf09d644522955b38b61a84093f30bd606
MD5 184897511fcf4b44f544d945e308755e
SHA1 e721b4b8d3703bbf98868df802acf42aa3536b5a
SHA512 e6a1595e0fd3878d3b31d5d7c60ae276332adf39e4d59267516ba279d55ebadca19f4e3847219b174babbc0007b626233dfff8b260dfe62f616d8615d8b4a017
SSDEEP 393216:MdbPkEcf5nGTN4g2qxaQbiOT3tXwUn8s0a:qkfibH3Nnvf
TLSH
T1894729122646D49DC059C879C7678B268A6C30E73FA7B9EFC0F461252B79DBC1B39234
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxil.dll

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\dxil.dll
Size 1.5MB
SHA256 7def2d17f6777236179e1e855a06a1e19e46193ce8de1d9f6bc3c40c183880b0
MD5 02748064c8868034ba6070819b8825db
SHA1 1cb2e4ee960ab1d2483dd7b0eba364720b1ed43f
SHA512 2e0cc0642319b8bf7797403189c98f28bdf4c02f6ec7b72208427285f7e318c3bd3856c68f43e53c902d5fcbb4adbbf1e6ae418920a07f71920a64ea9caa03a7
SSDEEP 24576:WcuJxAR7BBPp6UMPzbOXh9/duHdFnXIqpfya8PNCdbyKE5vl5eZiE1/0Wy4r8H/1:WsHMPzbOxBduHdSCde8ZF1/0Wy4oV6bU
TLSH
T10B657D6B66A800B9D4BFD174CA438E1BE7B2B45503B0EB8F16F402A61F577B15A3E311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

files_list

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\files_list
Size 6KB
SHA256 a6a92b393512c688e29ee306223c4e22d6446cb49d882cfd3812fa7af34d4510
MD5 c3bd13cc30484f8117d6411787689f78
SHA1 4f94adec66a33c5e96ed3b7d48fc9c527fe822ca
SHA512 aba8acd32d00eb56e53dc957ea7788f516f219c75fdae286c4978fffeb9b97d9b0ae00b3d76e7c1739ab30e1ea7a1027418924359fdb51519e03fb1870828a1c
SSDEEP 96:TMyTfz5XZyITJhGwbx7Vt/JnZ7vMbngEDi1JZJiRORnOU:4afz5XMRwbxHBZ7unmvgORnOU
TLSH
T1C0D10697895F0265CAFD93F1EE61E89091342495EEB83058F7C70A5694A33FE02C9ED8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

headless_command_resources.pak

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\headless_command_resources.pak
Size 2KB
SHA256 8c0af48079123a1ed6f03f0d830527b21cd224c2fc7575ec485c486da41b16c9
MD5 9c33095519168e92728c86a591a17862
SHA1 beec5c5d149d46234897395f72f95788a568537c
SHA512 f4323121659cdbbd1ac0872cde925dc6143ec2a3221c8ccbb2273e0916f1341beede54121e077b363e2995a656d46192758b65880b8dbf92cbac381a4431cde8
TLSH
T146511893360AB6A6C079C72C91DA9A7C6BE58325748DB5744EB70C33E9384A345C2871
MD5 SHA1 SHA512 TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\icudtl.dat
Size 10.4MB
SHA256 d0a05dcc74a5b6ce1657a2ae44a58c0df03a1a07c24a4df2e3381353911382fc
MD5 f50c621247b8ddd574dc9790830f28c4
SHA1 ea84f3a773b5b90851753353826fcdf94576b3c1
SHA512 030df4e2c8f0354a97ac6a21774d6bab1246237bb71cc286b1a310b1a7602dc31fa056b8beb1157ac71b13d3744cba0fa71ac807e5f69fcafebb3cd827b553df
SSDEEP 98304:nHcBQYOo+ddly1/rQqQC1HiXUxO/RJk3IWhlYntjndL+j89o:nHcBhORok2HiXUxO/RJk3IWhlYntjd/o
TLSH
T1F8B62803A2FB4EC2F9FB9FB098F552779567BD49AE32805951042F3B1C333908665B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

installer.exe

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\installer.exe
Size 8.3MB
SHA256 ed8a17da5e7ce86d6be3cb9956641c72033cd9de51bfb0a4b2caac6b93f2215c
MD5 9cb7a6660482c83b3f1308cc6716c71f
SHA1 5f0c0a44a8ea83efa5e18196f8376c2c0600b42a
SHA512 30e6bcb36c593e49774d9deb12a87d0942225cbcc785d348c8762cc6f50d1185b5348823a45ce268bbd03abaef321165b956788a5fb8e1c4c96c70b649437845
SSDEEP 98304:uh6i+ubH0SElWmLmgm3yrglOgw+Mne2ZQYNY8AFC:Li+ubH0SElWEZmXFC
TLSH
T1E3967C53F2A601E8D06FCA748B7A523299757C464B31A3EF0A943A251E75FD46F3CB20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

installer_helper_64.exe

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\installer_helper_64.exe
Size 594KB
SHA256 8cfcf9d692045acbe3878d004f0f11b33bb371feacad18dc10d90ed4b54ffd63
MD5 6b24294bc6c8c6fd96eb5dc65d18093f
SHA1 b72a566c418dc2eeb62d0e68f0bbaf0c361feddb
SHA512 e8b85a123fc3f02e53fbfd424e0a2a7a7feb18f7f85f2fd13810f67fccbb11df7660ece960829dbe860c608fe1cccf8921535775032e1df853170a4e45781e9b
SSDEEP 6144:CLU8SW+J+Tb5GNgbKFaeiRwozC63/c27haumrv/OnlD/WYgo5J5PzOi:W91GNGKFHot3laumrv/OnNWYB1LOi
TLSH
T1B1D48E55B2E547ECD07AC1348A428556EA717C960F25BAEF02A0727A2F779E41F3F320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\libEGL.dll
Size 492KB
SHA256 d7715f3af7236807406ef95c2431971183d581c6269793cd9d84395562d82eb0
MD5 3a64b23e690d1c3b9875263566e934a5
SHA1 3a3898c079761ead338ce861050713f8f0133f73
SHA512 8d80742d5df2be677df02eabe688768f3ef14307e822a45f73aeaabaee8e6c2ef55f5bf1632f42c15677cc9131810551ae008b4e5ed34d731338e5895ff6aac8
SSDEEP 6144:93cJ9zIbe8djApigXQoRHbhiqW1WlPmcIhNME0Bw2MoVxALd7mtVk:lulaj+XQgbW1WlPmcGB0B5MoVaL1sS
TLSH
T1C2B47C15B2D949ACD07BC138CA538547EB7178560B61F6EF02A0E2792F7BBE05A7E310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\libGLESv2.dll
Size 7.5MB
SHA256 1967c38e67ed3e188a36cd5c749e11b84a393125112e03511c2f868d73cf3376
MD5 7431a4154741f35bfd8a09c77469e698
SHA1 48ca1798f9c018b51ec1772b6ab521000505e052
SHA512 f1bf0d03374b541f1bbd723a2c3712aef305f9643c913fae51ce5fb74d59661de14aa3a28fb94088686ac351d0e74688bd98c1a371d50081092cd22d9cabebba
SSDEEP 49152:4Tez29nJyISAnlt3ILAQO29R4ZF7fcu/vAlGyuP/K8IFElZlrWaQFItsaa+TKc3Q:Zm8LqCFMZ4PSWcn1Hs/MYDzqU
TLSH
T12E867C13F2A240DDC01DE2B49757A227F634B8450764B2CF2A9857163F7AFE0AB7A714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg.pak

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\localization\bg.pak
Size 998KB
SHA256 c6d6c2f4182b99be8cfa1d53d4489b7153c1f08b5d99bb33ea4d626c741c6f93
MD5 4705b8df365284ecdc9b8d34037813fe
SHA1 8653ae627518e6f61e7f7a30e3cf57e87914626c
SHA512 fe3143d626ad10669497c259381a725bf448830125eea1e737f45126651f22264b1b68bd3937a57d20ee1e110273f5f0b1151841918283fc0390ccf4a124a2a5
SSDEEP 24576:KxBxeE4b3JwoGvqG4l9cI6dBBuK026g2HQ2WrZpvYAgCzQkEC3UnVb6fSIAFWVI9:KxgbIqRydBBuK0tQ2WrZpvYAmUUnVb68
TLSH
T1F32535A15B9A649F0101F45F98087E093CEB84FE3FE7879241652DBD39F10B887BA64D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bn.pak

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\localization\bn.pak
Size 1.2MB
SHA256 7697616d6cc1a5c742b1a3de1f063594c3a4f1f6e3af3950bf903e7ceddeda4a
MD5 480b435312233e78ee321395a4233bfd
SHA1 3f481c8bc132ec193924971ff6fc744056086f88
SHA512 f38515dcb3b525030e05bb98b0cc2723e213be1742b99bffcc1e0b706ea93d49b177a1ced14a3d77ae8749975dd137c59d7b80342508919638db44e95e01dbf8
SSDEEP 3072:3H6YNFxz08tpmUnQ4Z8VgqZIHZFQwQskOTGQjwI1U63x+TUZOQUPD9:3H6Ynxz0WoUQ4Z8KqZwYwL5jw+x+1
TLSH
T1EE55FF209C6E81B2A8D5CDC9434C6330C123AE979B65F74DDC17A25938ADC3C8DADDB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca.pak

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\localization\ca.pak
Size 628KB
SHA256 23198bd37cc02530154bc83f42f6b025e27f377390c4065a9efd1c4f178fc16f
MD5 9056d1386e063d5149feaef9a1f6a9e9
SHA1 8e2f33accece81b9d4883b17230a2e5a70ee2270
SHA512 f4fbcbee43b74ea97005fb8c52da6b5de651eb0ebd488314a4c646bdad14409c26da362dfd35d3c88f5904daeba40b242efb9ea3484b941b7b087e1e5b542a2c
SSDEEP 12288:JFKUO7S6ybGbf1bCCrz+W58rP8lpfmbVi6Z6M6AqHl9kdkcBKMe3aR4Uz1oO5h51:JM5/vY9VyLgQ6iBZnt+ja2d
TLSH
T183D4F7238BC83B760493330AFB42C257F09CA9847B16D254F5EE1A5622CCBDCD677A95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cs.pak

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\localization\cs.pak
Size 627KB
SHA256 0597f28c4cead0a6aa72e956f1561b0b72910f86990e3466b78e8e7c3652a3d7
MD5 632bcd0fb013120d84f4c5b32a8ed29e
SHA1 1fbe4fcceae5debb14f2c0dbcb8f6734dabf4eff
SHA512 ac8ed28acfa3e5c73aeb171ee2367b2295230ec9cb4708c9608cd91b68178a4bbade310b9f23047e1d331909282bfb23d431cfbca3175d5935b4b0016bf9f89d
SSDEEP 6144:EXDbFeFBgcihKMeozHJ62GOgISBaq8QtsVVpCvJfYu3qjWMqYhD+VV:EHwaxMezHJ62GOgISMgFV
TLSH
T1DFD46C1FEB936439584002443BBA5228BD5E83140B6EA9AB7CCF9C91227177ECFF1D58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da.pak

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\localization\da.pak
Size 577KB
SHA256 1864accf007cf959ca4f015aa05ac3a561854cd7869599284e273b32e57135f3
MD5 e3d2b94b1957635a2f6ae0fddbe90940
SHA1 931c470d8f690c721eb384864018b9a5799618cc
SHA512 1b2fd59cd3cc6fee984da52509e4ac18b97c053358753732c5ace889b8d457f88a54bbabc465ac73efbd4c32765ab967c525e8f5cb64de6c4122ff34a263fb29
SSDEEP 6144:Or2hiDIXtUqCRLj4ms62+wBzVWJkTxLxVtsl0gmd4AdCfwgKszZh50RQgkSCEd9p:CNS2R7qak9NsrENRQgkmOZ7ZuRYNQ
TLSH
T1F2C45A4BCC9C333F89A90764F6118DABDBAD543CC684664F75D8903A16CBD6092BF2C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

installer_prefs.json

Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
Size 1KB
SHA256 b2f7671ad43fadde5df222e00992ac72c63e96d5b7205768e4d958725583f48a
MD5 6770161b0aeb16a91db7cb958f572104
SHA1 88b514f1f1c18d81576f0b1c3786ed9f5f179582
SHA512 e84cbbe2362c3dd6cd537cdf2bb0a7313c4e3af058b238f6aad83ad2cc131e2abd955ae7b549c6ab302e55324466125f643c23667925abdb5dc329a12c93292e
TLSH
T11031D810410650B77F31835FC6536BAA66031503A42824E0AADB090D68EBDC71FAA91B
MD5 SHA1 SHA512 TLSH

Submit Download

installer_prefs.json

Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
Size 1KB
SHA256 6b171ec739325bcf26eab204ddce3d509bcb25dc35dc09d3adaf71abf9f174a1
MD5 ee760c37ddb0288323ebf05eaa033314
SHA1 b946b065b1db7f6ec66f37dfd41519b580a6fa23
SHA512 3883b8edb05635643d4baec3934145232d5cb6cdc99cbe081e37ed4f3a21b5865635ccaa23590879076df62fb49f515fed72442db90566f8e84a5b7ac08467e0
TLSH
T14931CA50410650B77F71835FC6537BAD67031503E42814E0B7DB050D68EBDD71BAB91B
MD5 SHA1 SHA512 TLSH

Submit Download

Opera Browser.lnk

Path C:\Users\Admin\AppData\Local\Temp\.opera\f8274ee1-bfec-43d0-8cf2-57635c70cce1 Opera Installer Temp\opera_package_202608090708141\Opera Browser.lnk
Size 1KB
SHA256 5c9006fdc0108be4c66d286b03ee11de9392dd7d6d249b76676ac5e8ff592bc2
MD5 e1b3bf8d64e7b5e0e7804ea1474f0b8f
SHA1 d6c58edd4cf056ad611567d0398550f13cb79aa9
SHA512 c0ef15ab94899dc29f8b94a9c19de7a174d7d8ed70844b8b185a49dedc5f10c650425abb4a35c75f576473fb3c2962522a82af17e3d9d365090f941030eb824f
TLSH
T12B21F1453EED2B31F2BBCA3644B63B6F9179B411DF074E0C50A442896975541A84CF2F
MD5 SHA1 SHA512 TLSH

Submit Download

additional_file0.tmp

Path C:\Users\Admin\AppData\Local\Temp\.opera\f8274ee1-bfec-43d0-8cf2-57635c70cce1 Opera Installer Temp\opera_package_202608090708141\additional_file0.tmp
Size 2.8MB
SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
MD5 3b028b1188ac321e66add16f8ebadbec
SHA1 086bcb2b1c0d300be15c1390841aadadcec4eac7
SHA512 17c390e0df8e29ff9ad43e581db298ada2d8378fbb890dc5f4b17df8fbe21134f99ab203ea4752a419215d289c128a1d8bc14721bde80042e5bb4c3901dffb72
SSDEEP 49152:+kinoIZOrzV7AlDfo7eT/uAtH00raHx774jx4aGhcr0glyGIGE1HVyVNW272DS/Z:+kiocQzV89Tmeradk2ha0gdIT11yVQ2w
TLSH
T167D5233275A48C34D62312321CE0FAEDA5BE72701E6347DB73A42B1F9EB01979A1D562
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

assistant_installer.exe

Path C:\Users\Admin\AppData\Local\Temp\.opera\f8274ee1-bfec-43d0-8cf2-57635c70cce1 Opera Installer Temp\opera_package_202608090708141\assistant\assistant_installer.exe
Size 2.4MB
SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
MD5 b0408fa2a406f483e42c3ac102d35e9b
SHA1 fbaca900ad54abc65ec2cb34d63727c87132d16b
SHA512 2e8b9af626fff68ecd0204d6a3151b4518749143ec78a2f8f99f959399d1c8ea59987f99c38c9e48fe38b518fd8c91381356daf3f17944fa3432337b882e5401
SSDEEP 49152:wJv8lBbu91xwyiZSwRDzWEibQojjHLQDpizF:wR8lBbu91xwyiZSwRWEKQWjHLOpc
TLSH
T10AC5AE12A86094B5D8563132321DEB3E9A30BE1657354DDBDB90BCC1BBB86E2353734B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dbgcore.DLL

Path C:\Users\Admin\AppData\Local\Temp\.opera\f8274ee1-bfec-43d0-8cf2-57635c70cce1 Opera Installer Temp\opera_package_202608090708141\assistant\dbgcore.DLL
Size 222KB
SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
MD5 b26ebc5cde9b1726ee9f9534dd6107d0
SHA1 de00af3ec4de63a158bcd50c6e95b046669d3353
SHA512 2e01c65b58369c1f5f4081cf377c3fedd87ae5fca63cfbc44dd7859a1e10a849d1bbdbb592349d793166f577dbd954cd8660f625dcbc9adc4d936d6a44f062bf
SSDEEP 6144:FASh0NdOEQzFh0ekr6nzwBaQGdppLIg2dFl96Fl:4MHZn1n+P96Fl
TLSH
T14C247C2269401533DCEF12F062AF363A96AEDD90239490C359A05BDDD6D4BC12E3D6EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dbghelp.dll

Path C:\Users\Admin\AppData\Local\Temp\.opera\f8274ee1-bfec-43d0-8cf2-57635c70cce1 Opera Installer Temp\opera_package_202608090708141\assistant\dbghelp.dll
Size 1.8MB
SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
MD5 021b11c0fc1a09e49a2046ef07d1747a
SHA1 4b955c1e7150db4f07528929fc529fde9738a2b3
SHA512 6ca94fdf2b92928859152aa23f31df46944eeeac7988f6bb5d647341843d8d2aa91c2c810d17c8b58a03c99e4ca7d7e1ae6b6c2d9ea5029616d870b89794d6c8
SSDEEP 49152:xEDlXSohR86M5NKBlv/2yOFVnzM9F0KM7:uFhR86MHyl0fb
TLSH
T128856B20E784813CE4EA1177E67C7A7D85ADE524073440CBAAC45BA978297D32F387DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

installer_prefs_include.json

Path C:\Users\Admin\AppData\Local\Temp\.opera\f8274ee1-bfec-43d0-8cf2-57635c70cce1 Opera Installer Temp\opera_package_202608090708141\installer_prefs_include.json
Size 224B
SHA256 f799101396e58ec98238b81669c288b0649788476fdc997cd029cfd5239c8aad
MD5 a31327ed38a2e2aa048700169e5c9e89
SHA1 cee83a9db48bf9c0d963bc6d03cc125af5cc4ffe
SHA512 b302790a45f5cefca7131f81d2d15976d402a48147960dedb5eaea136205c7a5e04635521f08c63f7ab53f1b9dd283e575240076beca5f392f47f0522f105fef
TLSH
T195D0A755802BC0E365B00283783633DDC20B1B038C716899B3C71125C07DAB326E6E1A
MD5 SHA1 SHA512 TLSH

Submit Download

installer_prefs_include.json

Path C:\Users\Admin\AppData\Local\Temp\.opera\f8274ee1-bfec-43d0-8cf2-57635c70cce1 Opera Installer Temp\opera_package_202608090708141\installer_prefs_include.json
Size 239B
SHA256 ad0a70852936dbf15eeb5accadd7acc1554959df5b85898911e4281e402e287a
MD5 d89bea9bbcd4817b77b7b90014f1da87
SHA1 21cdef3b05e461f645e198bb92f7c787ad0372dc
SHA512 70f794b897b35a6d15559a05cd358e98d2887096c60f7cac5c2e1d065e1a2c39618d64cc81b9fc2c3380075705441c3856b0df03eb6feb4396e8558ab2b1cc96
TLSH
T1D6D05E59802AC0E269B00287783633DDC24B1B0288616899B3C72125806DAA226EAE1A
MD5 SHA1 SHA512 TLSH

Submit Download

installer_prefs_include.json

Path C:\Users\Admin\AppData\Local\Temp\.opera\f8274ee1-bfec-43d0-8cf2-57635c70cce1 Opera Installer Temp\opera_package_202608090708141\installer_prefs_include.json
Size 1KB
SHA256 49ade8dd6bb981e798d466c3ef5cffa3fb071a1bfd9d8b546496e48f52608c13
MD5 cc55d84c6baa6f35bf9c79859b4772a7
SHA1 fe0f25fad38392d41ac2e8a8928375a78a529838
SHA512 b7f451b284617bc71bd993950595811bc58aea76e73f258f89166890c096232b4bb2a9c7e7990fbcac6e0bafc3454b7d315f688481978fe8cb6559457824653d
TLSH
T1CB1196A45141F0A36771C14FD5772BDE96071703986464E671C2045C94FFDA20EE5A3A
MD5 SHA1 SHA512 TLSH

Submit Download

23e37993-3615-4012-b721-25c1b4a71113.tmp

Path C:\Users\Admin\AppData\Local\Temp\23e37993-3615-4012-b721-25c1b4a71113.tmp
Size 2.6MB
SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
MD5 cc79434c290887ea9f9eb97967e3ecf6
SHA1 a3c9fa2a279a6a30c7c44240331c500e37b3e004
SHA512 49bfd073fdbdab7ac6adc62a3f2a5115fce06548d124ed355f40e8234329028499d840785bc7b2e55a2f3ce2fb9d77bf6b2c3efd70508f6303ed0ad861c27fd0
SSDEEP 49152:uwEkdF+R+C0LfbAeXf4Lylz4wXH5wtC9HP3W1FPhMZSXUq4yP4wITCvhbgK96H3m:ugTYYLUDLylz465OCB34Jmgb4c4wIO0Y
TLSH
T134C53341B62C4A21C023E737C2904F763FD9D5309F166BCB8263E4F665E89822F656DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

installer.exe

Path C:\Users\Admin\AppData\Local\Temp\7zSC352D999\installer.exe
Size 8.3MB
SHA256 c2a6825b895b245bab9774e69a450a11a4352eafa8d4da5fdad0e81341d4e67e
MD5 9dbf6590b693218b7ef20ae8de7eef6f
SHA1 6d8a4f3e48bbeab782da7166a8700bc35ad39416
SHA512 ebe898c89ec43db14a2744078941647737350cc27bb515fa83713e372576c0ce77e5ede72b227d2dfc369bca1c6244b3ceca5ee443259023c05d636ba81f8147
SSDEEP 98304:2h6i+ubH0SElWmLmgm3yrglOgw+Mne2ZQYNY8AFH:Ti+ubH0SElWEZmXFH
TLSH
T1EF967C53F2A601E8D06FCA748B7A523299757C464B31A3EF0A943A251E75FD46F3CB20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8cbf6a02-1ce7-4b06-93b2-736b95ddd64d.tmp

Path C:\Users\Admin\AppData\Local\Temp\8cbf6a02-1ce7-4b06-93b2-736b95ddd64d.tmp
Size 13KB
SHA256 35d78e805a910aad7462893e050376f9d18dbc73c592b4742e6ada87eff3f06b
MD5 08f7686326baa481149eeed33dc599f1
SHA1 291885ee6d064f0d8ae35c92bc0cd6fc35e44151
SHA512 d5580726adb7b39fc67a2566b42ccdc4f0db0c2d5be27d027afcf005e9145ee84887d0ada93d5dad1c889112def64525ac05716a8609959df2f85dbeb42d18b3
SSDEEP 384:NMkqXIIKqOR/UjJQrQBe6nHUSpM1L0kkW+54:NMsdMVI6BpM1Ak64
TLSH
T15652B07DAB1BA841B1CCF26FDB25C8055304FE4B9834A37639424F8199DFEA2152D9CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OpInst.exe

Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
Size 3.1MB
SHA256 2d37bbf39c6d924828026b779322c808936e695983ef51bd65a5b820608deb73
MD5 3c663515cadaf37fd79366d06ea0544d
SHA1 87a55dc5d041a875abc6c6458180993a343a235e
SHA512 bcecb2871bf1dd0bbb68abf005c15b6b4867128f29277a37827241772d113de73d0fc125e99edda4f0f81f0ac854a5eeec844daba065f2650403541719a304ff
SSDEEP 49152:iVAbwXR+eb2jcWlFwfYud53AgGKP9u1ce+UhAOlY+FGXVRrmUFLU:mAO6IWzwQuddo11ce+UnlpFGm
TLSH
T15BE523127A81C835C5B311334F89F659A17DF9621F32D6CB37981A6F8EB06C09929F4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg.png

Path C:\Users\Admin\AppData\Local\Temp\bg.png
Size 224KB
SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
MD5 21eb6b8232802f32b6483eedb96677bb
SHA1 b390f01600e521586e210936a4b57a6b89e66a7b
SHA512 5cfcb0278e5e7473dde396ee34115a3f50a9ad195d99b53cc5cc33a169a42c8f729806491fc0fb607719139081fa3c774c37b1638de1289b73c0c4c80768cfcd
SSDEEP 3072:7MuA+f6FJxlUhyLg2cugpbM5Q+jBre6cAJqmm6nkrw8sGaDy7y8bRzUnKdh8BfM9:7MuAWojcVdGSf+4BML49RzUnKUuLZ
TLSH
T1E92423876BC391F4590BD65FE9386BEC3CD4E7EC82AB113C931A42424D8416B85DE8F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1036_1102225843\CRX_INSTALL\manifest.json
Size 1KB
SHA256 ea8b21224a4041e0b5b563ca4d8335dc30b8b9af8a4e03499511471c3e4a7a4f
MD5 5b8f4dfba63050ab37f673e116823f39
SHA1 9b644fd1246c4f616b820a4bf8dd2a40cc9a820a
SHA512 b3aab04297a0f9ef9d606388f0ad350e8ae824bebc4bc75df21f5bdccdea4303da9e62be5b919a50ae8b22860edc9086d6e3de9d6165f5cebda0ed4014705579
TLSH
T1753161BED8DD8D32158599798CB6671369660A870FA87D0837EF408C0F0CA1F10BE05D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1036_241332636\CRX_INSTALL\_locales\en\messages.json
Size 396B
SHA256 1bcb4888a65788a50ed88f4bd95955d1dafdc950b5ef4609b37f42934a4bf3b9
MD5 f4b909ef13d8b4dca31e542f14ecfc55
SHA1 4381ed812d8073b5bd5b873b51697364a1690772
SHA512 bc0b136cd2c055d27e7c8e4b8aa5540f3926df1e3be0f6b25d14c14ddb72602eef8a4a60e4c15085d63610f6696cbb12feb8d21447f35ec844997c6242be1a35
TLSH
T133E06D0489049F3B419E8269ED68BBC4AB301B6A32A0BD2929C8819C0605FF344B23D8
MD5 SHA1 SHA512 TLSH

Submit Download

Icon_Light_Neutral.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1036_241332636\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
Size 962B
SHA256 e8adb8a9dcca121a1853749ebef122b84a995ebf8775cd27b0dd54bab9840bd1
MD5 a31c3c0f384b4c1af2e9d8bc153d3824
SHA1 f2174d637bb60be75695b82639e9bb0ff0fa9951
SHA512 7cd09bb9b3b357f4ffac7e982a676d8f92ddcae8ce02192dedac9a7b3f3580ce2b1ea8be08a041094a45173d279076d19d3f5e6cc99be74d483921030e09edc3
TLSH
T13D11FBE6570FFFB289DD4EF87BCF0140107B09BA0B2069647C975A15557F52D49D0127
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1036_241332636\CRX_INSTALL\manifest.json
Size 1KB
SHA256 b655477791478d7f6f560c740fcd142b504c7f3a73093031a3257abc43fd95ce
MD5 1608f9e8eadb961f5722fcbb4d3ee6e5
SHA1 37da8b34ef9ddb7073d165ff35c3a3223adb952e
SHA512 1baff4b22bd1c82aca6e21e4db64fc06fd3875c406c981ae828f04037f7fdcba59bce43d982f3aa9bf9f4b0b7b9696e905280cd4a925574f2dca59550876697a
TLSH
T13631FE51C47CAD7B15981A29BC360543DA646A875D207C5C33CF808C9F9CB2F01FA18C
MD5 SHA1 SHA512 TLSH

Submit Download

popup.js.LICENSE.txt

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1036_241332636\CRX_INSTALL\popup.js.LICENSE.txt
Size 1KB
SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
MD5 56868fb04ec3f6436a450b0be0c49947
SHA1 3114eed847366239e1b72b45af410bfba81bde4b
SHA512 a2211ab99b6d04b7f0a7c5dddeb8156c7c24e8ff0b2860cbddb6273d25089c7e066ea6be363a610553ee2b275ba4f7750f9456b30251000596544330d8262dc7
TLSH
T1CA215B5A35F53633026149A2670793CEAB0C11EEA4BF347BC4918374AC344FE8394DB4
MD5 SHA1 SHA512 TLSH

Submit Download

Icon_Light_Neutral.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1036_418520274\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
Size 2KB
SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
MD5 0566b67d5fa120d6da250a92577c8873
SHA1 0baf54c5f6a7b8cff4c82d22be9113c43a099c87
SHA512 9dcb904ef68419b2462d88133e87d6f4258d8f53f05ed12868718740d6e9467ab2d8769a79727c3dbd01c6807aa5e4863f1874465a7dc95088bd724f9d897fb5
TLSH
T1CE516D6D716E2332D0EFCE2E04C6860EF8680E9C50489454BAD506EF8905B9C9DB33C7
MD5 SHA1 SHA512 TLSH

Submit Download

rules.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1036_418520274\CRX_INSTALL\rules.json
Size 839B
SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
MD5 112b4a4c6143b507605be0de6f359ff2
SHA1 4ad368eac9b4965eb0389d2da4b2723016c8c69b
SHA512 9afaf96cfcde9688664d33f37168b9c637e414c3fb768b0c70cdb19cefcb42089e8f464a8d32bcc21a140414c0557fbc02c12a29a5eb662405d55ef7f1781b2f
TLSH
T19301B567C4255C230342217CE42B0719F970E14B6E646E2F3F9D845EAF5E47EAA7238E
MD5 SHA1 SHA512 TLSH

Submit Download

favicon_opera_one.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir864_1522124661\CRX_INSTALL\favicon_opera_one.png
Size 2KB
SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
MD5 cd78c5defe6084243478de9874682e1f
SHA1 708c8c0649039ce9b3f8894d00b712d65d488ca2
SHA512 96744c72f623462f1c64c2e49e7a2387846ed65a78d94841adb3bb5b52f27d28f657ca3f2910b6b1b338a032a9b0e0ac47d23e7b25295d6841480b32268f4db2
TLSH
T163414D878974A4D5FA41D0215A037D9EF9BACDEF40970E5010D9043A427AF5573AB33F
MD5 SHA1 SHA512 TLSH

Submit Download

3c792e9d4fe9c839.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3c792e9d4fe9c839.customDestinations-ms
Size 25KB
SHA256 822b75fa82b7369fb088eb821e8f74d3f91f0c4e9fa08d8ccac2c840e25488c9
MD5 eb4996eb29a886bf9a06d58cd42d38d8
SHA1 051ca6d93e28af9c16e1ad1bc6a759bb1f349ee4
SHA512 190dc8a1f493f95149665f19058ce216978f5b8ab351db08725c96a5970d63a7305327a9ce7e0fc82de1e50ec19184b488bbc011ef9ab8382dd44dca6c7bcc4c
SSDEEP 768:DzC5QlDwDCzwDwD/zJDwDmzWDwDMzoRDwD4zWDwDIzEXDwD0zYDwDlz0DwDtz4Dt:DzfDwDCzwDwD/zJDwDmzWDwDMzoRDwD1
TLSH
T1F3C223543DED2A23E1F78B7685F5368BDD18B8527B065C0D1096434A1C23F62BC8AB2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3c792e9d4fe9c839.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3c792e9d4fe9c839.customDestinations-ms
Size 25KB
SHA256 75beb12ed7b1c3beb15cfbeec7760e7b477745b2791ef5c2214ad7a08c80ffaf
MD5 6fbd74ab2bfe6a7686dd8ad20852792e
SHA1 cd215b5d9a06dbb20e5c2ecb2d6e12594843296e
SHA512 e75b846faaa3f2fc2a0e42e3accf99ff07d67e3bef3096dc95a934a636274deb475120e7a19ae801817521696d0b23cd877b8a63f1a7f174a02244b9bea35b17
SSDEEP 768:qzR5DDwDLzFDwDWzUDwDvz4DwDMzopDwD4z1DwDIzEXDwD0zYDwDlz0DwDtz4DwY:qzbDwDLzFDwDWzUDwDvz4DwDMzopDwD0
TLSH
T129C202543DED2A23E1F78B7586F536CBDD29B8127B065C0D5096434A1C23F52BC8AB2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3c792e9d4fe9c839.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3c792e9d4fe9c839.customDestinations-ms
Size 25KB
SHA256 aba067e3c53460221f98010ab135f7b91975a00c7382f8aa2572c120f3ee74be
MD5 6225431dbf42ee72c96ecdc11d7e2279
SHA1 9df7dddcb28c3f15aa8f45b3a3688ca6a4fd86e3
SHA512 5e21647d0fbce9d2fac679296d91ed196793bcfbb3ba631dc75d5cec5c62baa7e135ee0f6b68151083900ff1d003e19a4dbcfe32ffa5f9b9c540f7fe629beb01
SSDEEP 768:qzR5fDwDLz6xjDwDWzfDwDvzaDwDMzoPDwD4zZDwDIzEXDwD0zlDwDlzxDwDtz1p:qz3DwDLz6xjDwDWzfDwDvzaDwDMzoPDK
TLSH
T102C212543DED2A23E1F78B7685F53A8BDD18B8527B065C0D1095434A1C23F62BC8BB2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
Size 40B
SHA256 f60b26e311470b61c0ac92e1cacda6a9db5f98f7829cca92b10182359a3bb537
MD5 8f5ceec196f91f2b6e3bf70478beace8
SHA1 b2edd96b7cd96212462e2c5d0235456e6860fdff
SHA512 5dbe18434fc8600309c75f185b17041de816bfad8203190610f382f6f27a854d0e39d1c4ea551c080e3d4cdec6782b97d4f986777ceaa3aabd08a8c5c16fe647
MD5 SHA1 SHA512

Submit Download

1a44451a-78f0-4b8c-931e-ee6ffa98a3d9.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\1a44451a-78f0-4b8c-931e-ee6ffa98a3d9.tmp
Size 86KB
SHA256 54e2a30ca0b18934b2b18535112691330cc4fc42ca4645d01397214c81faf85a
MD5 3c9fb608c3c65d29147bbdc32225a4e4
SHA1 611b1dad5d6420c0a8aebd958bf78a2729eb03cf
SHA512 4aeb9b9b8ba3faea101a32804b057075c61b6132b6f13ac8474d7b421c52ced43b60b076ed4b40f34f90dc25500d771fafefbbe70f5f795900f9ced35e690883
SSDEEP 1536:CHdH56hHCkHTay4Hyu2HKIHYILHhHFOHjkJCHWCkvocXTSHEHssOfnUHVNH9HUHc:o6wjiUmyCTDATj7GORqV
TLSH
T1F983B8E6CCCD9E758FD98BF8DC36A72798D404059FEC9E14A7F9805C0386A85213F686
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

224a76f2-ae0f-4753-bcbe-cfae7372ff4a.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\224a76f2-ae0f-4753-bcbe-cfae7372ff4a.tmp
Size 155KB
SHA256 9552da76362069e24428f06c4565a116d1c0970c8532143094cfee02c0353f20
MD5 4ef1663adf6ac9bdbf97b07deab687ea
SHA1 210d4f2a71602fb241fe28ff58315b056dc4427b
SHA512 721da2dd4961b51e9ccc736a37573d061bc6fd869b03dabe2e487444e905eb90303f69f94a118c81d3a132bd323f53a672d17db3f6cdea428e4cf8f8f16f779a
SSDEEP 3072:Latrb/B4ZhPLJ0tSiJx6HbCxz9fNwkhb6JUSGZGnrTRWRqx8Lje1FAWJhUV:OZbSX0EiJc7Cp9VrNpXZG8RI8/e1FAm0
TLSH
T1D7F312A4E8F11E648B9E731FAC1F2BF5FE422F5F22C485498E91EFAB01179108C72855
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2daae550-45a3-4f97-94b4-0cc88f02c854.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\2daae550-45a3-4f97-94b4-0cc88f02c854.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

31841406-bcb1-4877-890d-4a0de346c4a5.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\31841406-bcb1-4877-890d-4a0de346c4a5.tmp
Size 10KB
SHA256 d021a317d8416aa39ebfc5c9e51997ea676044cd9e5b6ccfee94cdcabd6807cf
MD5 12125ebfad31c9b6a67a3c0d69c3958b
SHA1 5fe898ad7d54576159be89b668e1821c61ee185c
SHA512 6866cbf2ce1b427d416019a2c934cdcfd2c47b78c3b4c2ed9fa41fa57b4f238bef36ac105b72c7a5473962392a2e4f4fc6988ed92cb835d20528eab10808f744
SSDEEP 192:MNthZRz7QQ2eXMqZjfQs/FJ63Fn762wf9LdLU548b+WNObcpzSCtyIsn2ag443:M3XQ68zn74A
TLSH
T1A732534A99749DBB0CC6E525FA50B767F2E90010E561BDE8F7F8D82C14CB2CC6432A87
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

63c8a1ee-4807-4c84-9ba1-961a618afd15.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\63c8a1ee-4807-4c84-9ba1-961a618afd15.tmp
Size 171B
SHA256 079d2211937562aba821c27cd26ba5cca2ce61d839477f0c6ae480b48c056efe
MD5 5f74e5bc8d27fa6bbb2ec2e32e246bcd
SHA1 3a2582b65ef63d7711cb6ad006f37d1bbe079ea7
SHA512 11088e52ce7b33d2d5cfa8ed7eed92a3179691d9740506437a6e7965a649309cce81a52f1e2ba490b87a18d9e2b84e878567ad602b260de9fdabf35e5c83c47e
TLSH
T13FC08C29F4562C5C9C0428B8F189F776179F04521901892848CE05FD09EFAB8C3DDB92
MD5 SHA1 SHA512 TLSH

Submit Download

70399311-629c-4f58-9ea7-0a95c1b69c27.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\70399311-629c-4f58-9ea7-0a95c1b69c27.tmp
Size 203B
SHA256 9d251f33d992c5e5cb40b64fffa889cceb7b8ed73528255b2120d480d639fc5e
MD5 8c7fe9c9080449e34e7d1154e82e008e
SHA1 e9f8b14a455525a8cafd958039014ef19903648a
SHA512 27e6979ffc5168754ac0c636afd014e1b9b39b56eb5d51b213406190546c9b289598f08e50ccc9e4060074ec120bc87f08f2faeac0d2103ecd37109edf0d6778
TLSH
T1EBD022210F2A86A821E1A6B1A334BB27141C5A22102A2870A02E4622002D39A132BF75
MD5 SHA1 SHA512 TLSH

Submit Download

Bookmarks

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
Size 34KB
SHA256 5be1c5ec2cda0e6fdd76cf1634da3474f44d433c6600d10e4d33f8bca6911b61
MD5 f12dae45549ece276726e8ead845cb50
SHA1 bf63b1bac758e7aedac8b5e5d90c6ed4b08f62fc
SHA512 b2cf21427dddd2f4cbeab7acc518bfe8633f481a8e0c2ecefabf6c24a12440cacc03956350025481687dfb1d35d09c6b422f2f4a90d946f3ebce342079ba8062
SSDEEP 384:JdMkN3yZXy/QkTLf+HrMOmdM8OTIBoLxX5H8YTnJODj7KJJCyv0O9oby:3MIrQw3M8qI2okJODIJCyl
TLSH
T139F2E727D4026CBB41B013D164FA661BF686332F5AC88D8B777CDC4D8F76923615A709
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9dd09aa8-ea16-44b2-ac0c-3c75b43d44c7.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\9dd09aa8-ea16-44b2-ac0c-3c75b43d44c7.tmp
Size 48B
SHA256 2a72bbd78be2cb39cb2b328d88921eb4abb685b7807c1d534c693d3c6f58b0e0
MD5 f5129738616bf4d966098e366873589a
SHA1 3b2ff1293293b69e9682ed61dd5ab2799f9df48d
SHA512 8b76af4895d247444636246473f65857648cb954281030e225090c3fba75bad42c668c7d1ccf3628875fd321ee464b81a710ffabdbda7f1bede8d2b62c941d94
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
Size 264B
SHA256 4f6f5bc621b061928f8fa94e7be198f8c8f57bbd089c8c672cb512c728b30054
MD5 5cf5770e68c1f5f4fc9157b753514589
SHA1 d74e16907dcbcc15ac5a2b073e0a2067337b465b
SHA512 fe990e2f519cfd8e6f0d2b05be186306c0c6abbd985d6a48a0b3f8994c1bb24607a90e38d2c65d215abbb304ba4e95935faebe6b0a6b03e76eec4a9eca3b2f9d
TLSH
T110D080E858FB1705DF45057463324D79111C3C17D1002B072C557D754ED75C950E1371
MD5 SHA1 SHA512 TLSH

Submit Download

main.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.7_0\main.js
Size 46KB
SHA256 e1b3123f37dfe988a8a22427e98d06cdf472c23429f6277f68c6eeb1626cd54e
MD5 3a4b577e6f2150e055d503fc17aec243
SHA1 6ab613cb92850a343caf28887301748c73b34722
SHA512 d4fb08f3423ddb5501e2d50c4b3c6cec5be34c9b149d469074119b144fa54a317199f485a8dc7eb650fa7762a0be79b49a2d99b4cbe9dd8408a632baf0cb2537
SSDEEP 768:DvKIO8ifSEWA5W847cy/FWpoMz908/lK85aipQqkUlVZm5Kdnr4WavCiwdC51SqJ:un8VEbWXxYNG8/A85DQqkslr4JPmCHLn
TLSH
T1F22328996269687E0BC2D2ED925D1313952460F8680D84AC723CDFDE6A0FDC2127CFF6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.7_1\manifest.json
Size 1KB
SHA256 260b3142cfc312fac94098f84da9343a08e2a4d2e8e08d0e0fd4688ea261f4f8
MD5 f7ce9fbc6e0cc7fcf5b204352dc89ec0
SHA1 2c83c92e5868b9314ff0db67b244d7d11d3a88a2
SHA512 3f8b7cd9556ed330b3e4ff091b15cdfeee6485657fa8f366ace03e5d66d45e3bd689bd0fc72b728dadfbadcdea8ed6fa04a97996ae218e61ea6db4142c715b39
TLSH
T1C52183BFD8CEC13B0571AAAD9D761313F66A13AA03998C0F3B7DD0498BA9E05107D50C
MD5 SHA1 SHA512 TLSH

Submit Download

logo_128.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.6_0\icons\logo_128.png
Size 7KB
SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
MD5 8723b83f007f8c910ae071e275f99383
SHA1 9f76b6719f4dc7ce2ae4ce96a8577481735f1ecc
SHA512 62256dd55be00b1a70e9afc127ba2079fbd563274c6829739f99fd02c6bcd2b2afa21337d8f58a7d64a716f41c0d739ab7b8f78058255bc1b59450eb0d0bdf4d
SSDEEP 192:mbNUdF2i9HsyhJ589/J6sdWQG1i+5pqG/LzPYehuNBpDxw:TfLeyh09/J6sdWL1AUvfhOm
TLSH
T1B8F19E690531CCD4B5B99F755309C0DE2136CA98A431AAAEE0CCF1CC3C573697ACCAE2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logo_16.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.6_0\icons\logo_16.png
Size 653B
SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
MD5 e4fe7d0c1c77bb00d492bf59196fe3d3
SHA1 350335cd55b2acb2b8957cb79257375513b525f1
SHA512 73b6ed04cc5b46d700bf34bce51f50b19c89e9310053a473f577516a270b4ff7ff1ce954c18430c2625439bffed6153997a08d1aa6d3a4196b4ae5ad4089d556
TLSH
T135F0839A772C8958E9DC5C30B21F4297EA8C22E8C8431601A33F52313E63812138F08B
MD5 SHA1 SHA512 TLSH

Submit Download

logo_32.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.6_0\icons\logo_32.png
Size 1KB
SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
MD5 3e4cddaa76d8fcd9ac7b64fef89d4b74
SHA1 3a44b23b9b8f950f9168361da56cf8f86958a408
SHA512 9a6317ed1b9e919b3a6e3fd260f88b297b82498d294d7c86d1a40c20c35003694865f06632d1bf281417418b48122b4e01296e17318f7fe77612b3a716417bb0
TLSH
T1F221D8DF8464ED2E8531C8B3C14354E5E2BE94B3E47B9479F06BD8510C307958783E50
MD5 SHA1 SHA512 TLSH

Submit Download

logo_48.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.6_0\icons\logo_48.png
Size 2KB
SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
MD5 1a3f93acc11338a092785da97956c034
SHA1 ed1786563e53ad2fc076edabd25accb4ef241540
SHA512 7ff3c3eb9b7e55e799bc8c8ca66225fff47c52d85e1326f99b2e7c1747624462231e8dc9c09cc4d6e675d072d8da41ea998f16a4576de76c6575cda271255e85
TLSH
T143414AB201335E202C334219CA7203E2A80CADB0C02A7E91E0CCDBBACB00DE5E2DF506
MD5 SHA1 SHA512 TLSH

Submit Download

logo_64.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.6_0\icons\logo_64.png
Size 2KB
SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
MD5 9c3af737a428dd3daa949313d69be52f
SHA1 c24aa988066fbbc4da252b858fa738e20cc42c07
SHA512 ed9f869b3912eb8bf27624185c3ce648b5a586576deb7b1f9a0b6770fde1109a81fdb771a76f0902913c55aef7b6020f386dbd92a06c7ae106ca5fd593295c0d
TLSH
T129515D9D4EA1ECB15A2B46339AF935EBC5F0B37A0B2C277D60C94437A9C255231214E2
MD5 SHA1 SHA512 TLSH

Submit Download

service-worker-loader.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.6_0\service-worker-loader.js
Size 49B
SHA256 f8eef7c260d4743817755ab4987619c18d1266f27d2435f32ad3f50494a9058e
MD5 98ba3e7390f54d7b7c944a81543425d9
SHA1 017515b72aca14c87c6731b50ccf2ae8c1c25566
SHA512 7569a6aa2521d00b34f4e929b3a1d8fd72f5c4f10e63524deb90414be85ced641fa55299192e6c3646de1a41649b378de00ec1fb54a222e708de8236d63a490c
MD5 SHA1 SHA512

Submit Download

favicon_opera_one.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\favicon_opera_one.png
Size 2KB
SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
MD5 723cf51fae375f557b2f891a2ea603ef
SHA1 40f374149ae6f8f5b847be59ba019744c232ebd5
SHA512 d0f64a88cf62642adf30af333f81481f43fd2141c63a135162152d1c7fa705b52121cac69edab0f93d35cc425b43fb6d6af2adc4323e5ad8e11109a423ff6eaa
TLSH
T1D4411A8324F7F9A0FE30E5AF1353E0454E655B9E2B512738128D08B4A4BA6DE92D202F
MD5 SHA1 SHA512 TLSH

Submit Download

reader_mode.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\reader_mode.js
Size 112KB
SHA256 4f72bc46754ceed048dccf5c83fa36067f144e5ba13b046b12538808986e3252
MD5 59de0decd0e4751b14231dde34507403
SHA1 5892abedcec573765d8247204ae038ff4c44848c
SHA512 16a7716b4afd10d0984c99fdb4e2617af3ca0a96f7599d22675924760b72ac00bd5460de75b46fb26bbdeef9ac4ddd432bd70c47467d3cacf345af5e552de4db
SSDEEP 1536:Ska6rka6dmEctzRw8qxUyIVGjYG6xpvAI3z6A0k5miSZ75U66dpXdd0yUY70Lcx6:Ska6rka6vszmxnS9lbv93NddM3prX+wH
TLSH
T1C4B3D9ADB3927199928320E502FB0047E3355D451C1A5038F669E5DFBC24AAA62FFF7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

spotify_frame_interceptor.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\spotify_frame_interceptor.js
Size 5KB
SHA256 a6b9c0dcf141b8ac58176b870851294e492ecc79a83c8efbfc85e35cb3cada0a
MD5 6586f73b98953dc3d70ffd9a61e24911
SHA1 3e9de04cd595f3a391392a92010633d1d0608a38
SHA512 8ff2b9b2ac25b0cc60e79ac6399bed6d02a29b1f92ab499a89878c63618460a70a2d0e3f2309b227fda01e03c3427c4a11940b4b95704ada5689f80c385adda2
SSDEEP 96:xSVa6rQaSVa6j38bo5bYe3m/I6FScpoV9FzKovz1fFUAJxuisb71TTta12Ho6Io:xka6rka6j3805se3m4XFzVJFs31wx6z
TLSH
T16AB1B505815C4C7D8FB5028A9ABE135212DE2283787BD4C4EFA3C47597353CE9213BB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\_locales\en\messages.json
Size 429B
SHA256 c6a7161359e3c4fbc4059b7209c585f9aa2306c08e6c39a3003f4b29f2ceb22d
MD5 5250cf7c9dd7e49a4ed52b24698c3a49
SHA1 7f155a461d23312bbfdefc569b06eaa1d39cd250
SHA512 24e45c5c5cc87c8284fd852f347b6d9bcfb6a60e81d87758c95c01b9535d3a6fd468fd3dfb599c763ba355991abf0ef58259fa27cd013974d8ce2d593f1dd7cb
TLSH
T136E0C01889045F2B45BD4365ED68EBC5EB34173A2150E95A3CEC919D4B21FB344E27D8
MD5 SHA1 SHA512 TLSH

Submit Download

background.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
Size 86KB
SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
MD5 c8b19bb6ffa9ba9d07b010ee2483d6fe
SHA1 db1af85512d439f749c1fd64fa8f7dfbbe5f682e
SHA512 841d08ad1dfd23a85b3749dcec341c665457e0648509821ac140fe0ed753e8b0ea4a24e7b6ea5f06958f4ddb0b65f7e58250b783eea11c321fb975fbea63db46
SSDEEP 1536:PYHgfauhQ7F7yEPlL65+aSWr0WUvpyiSBwhmSvGj1S+f8+:PYAiuhQOokiSBwhmSvGZS+f8+
TLSH
T1969308CDB6C7F26293E390AAC03F101FF23A6D19740D4454B626DDD1782658EA236F3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Icon_Dark_Active.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Dark_Active.png
Size 2KB
SHA256 97d9553a4f725354a6d5c3eff11f31285fd89c3b150593f04785b83d0a56efc2
MD5 4805f857f6ec86c67d6b63ac902f4752
SHA1 9888b818fa830bcacaf384b70dce4c0afb0baffc
SHA512 6da9c63f4896dd278b4a29aacd523f052b98c3bf2426fe8b1aaa79a47e13527ab2834744d713964605d2430e96d94d3ebe9526e63e76bcdcfabbb1cadc1a95c5
TLSH
T1C4515D49BFB8561FD4E8F602B425092AF5FB645094829981F3D3D09B5F9C414CEDCD10
MD5 SHA1 SHA512 TLSH

Submit Download

Icon_Dark_Available_Red.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Dark_Available_Red.png
Size 2KB
SHA256 9eccebdbdb61efc0cbd8bccf3a5fedc6f9a1ebe5084b160783f90a56cd1efa7b
MD5 16ae2826000173329d9ae233205c3b45
SHA1 1ebdb2024aa19413be8c0382b9880b39020b4019
SHA512 444f955355f080376394e4593f98c81a705a44f8c4bbf1d149adf0d2a75b9b1efa09da742fd2846e12b1c7e2aefdf5bb0ad0b641743933b353033bef8607f3e0
TLSH
T1CC515E91DFFE269C4ACECE6B18592266219D4686DF42343187305056272EC83FE7B55C
MD5 SHA1 SHA512 TLSH

Submit Download

Icon_Dark_Available_Yellow.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Dark_Available_Yellow.png
Size 2KB
SHA256 c165ef60bf3806cd0a7121a8d6cfd06909fc84b38a07d43e809bd7bff564099c
MD5 690ecdc93f4bb7d92dcace06972cde64
SHA1 d7a6f16e34188192e247ae55c29d93d6821c7dfe
SHA512 0c86e835ed152a3c21232b1fb2e904cb28c44ede45908fb775dad250187894d13077867eb768a10819b0b93e935cde1aa1c86bfa6031888f4e720ed1059b4652
TLSH
T112514B9DE07D07542B13843842B67C2DA4321A384108153DAD8F4894A73FBE046AAB25
MD5 SHA1 SHA512 TLSH

Submit Download

Icon_Light_Neutral.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
Size 2KB
SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
MD5 bf24b39c7ecacb4ce180d5013d771066
SHA1 8b05f38ef028f9a6ca5411dcbc347d6672c252a7
SHA512 2398ba9b4216289bb2de142d614f312585f1e14e759d211ca169e1e54248761a78585f8ffd0de5f9112ebb349140f0346994b8a52a290ae22768a80d19cd8a9b
TLSH
T158515DCD26176426C397F654D206052A4F0841A72EDBF6E949306CEF9C53E0FD6DD760
MD5 SHA1 SHA512 TLSH

Submit Download

Icon_Dark_Active.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\32\Icon_Dark_Active.png
Size 883B
SHA256 50aa1dcfa9083b57dd6187752b2c149294210be12d263b793d27daf8d431954c
MD5 426980c9ff405355a4389dd121b31b18
SHA1 ec3e88aeb91bfd7f5a368c29de27b7ecd7a793a5
SHA512 8d14e5b173374deebe3adae31514b40227279a3eb566ba9df121deb77905ba7d011046830d663b53d7553718ff1077ef4364e504b7766c40a8bf6c9695f66ad2
TLSH
T13411DAEA276458BC578E6E7960C601E87FA31B80C476327CC814A41FB56C40DF6DB30B
MD5 SHA1 SHA512 TLSH

Submit Download

Icon_Dark_Available_Red.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\32\Icon_Dark_Available_Red.png
Size 895B
SHA256 2278e95b28851ade57217ab5c7b32598c44e1085693a3e26379643d29fa0a6d1
MD5 5e8ace45e9a0da06dc1cf459448282d3
SHA1 4bf77fde79bb7bbf83d6a970454d3f37460bf82b
SHA512 04550abc95d708b831c152e9a29d86957aff1d6abfab7dc3ab1eb389c6e395ce6488ac24ef17c958c88b911a3fcad4551a6d6774c5fa64fb02ac78d01c4fef48
TLSH
T1F51163D7EB2F68C4240D8C365D665AF332483CF79D2811CEE6464421AE29A4899C56E7
MD5 SHA1 SHA512 TLSH

Submit Download

Icon_Dark_Available_Yellow.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\32\Icon_Dark_Available_Yellow.png
Size 895B
SHA256 726a50a9c008449ab7bafbf21325bfc72093b7ae6a56c5be90cf8c32a8a44641
MD5 ca414d88c570b79af1635441d40df0f1
SHA1 e79d58ba493c2638923017e263405748377a8307
SHA512 836ecd41819a40555fbc40b504dbb97c5a90d05c93fe9462ff5ec7348790ec6d25cc53f0738e90694ee416f73970829114ffea449145f5173388676c01501673
TLSH
T1D611B7855F459677827747516A3FE727F08C2CE822B1411A6A89503A162E065820620A
MD5 SHA1 SHA512 TLSH

Submit Download

Icon_Light_Neutral.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\32\Icon_Light_Neutral.png
Size 932B
SHA256 b8e92f9e9b9dc82799231b8d1b57091a9d0bcdd9b54615f86e8c4e4e5c9f036b
MD5 5a8f82ba759b01fec7dbceb2c7287d6f
SHA1 dbc1d49775f1487b5cbf9b6ad7e67d10e831a1e7
SHA512 b82bcce803f5206e5c081e71c76ca973d240f687b5a4f9b09521c7618c6239683afc01a3115ddd93e58be299371d5815231bc9714a306c06abdabafc3eaf3132
TLSH
T17811F7DB0298B579DC3745FA31A235CACA6B19202AB50BE0074CD996352F8C090CA38C
MD5 SHA1 SHA512 TLSH

Submit Download

index.html

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\index.html
Size 222B
SHA256 fd21c7ca4637b0221250a14b9fcfb6ebc3b734e659ad80151be4bc579db818f1
MD5 c590faaff78866c962af44074a2da1b8
SHA1 418da44a933e3ed87a68b4ce849cab2c7917baf6
SHA512 c5185d1822035385753eecba19f278ee8adf06cb15424c44ef649ca5b77c728c9c929a91f5391992df4144cb0287647063762b15f79a47c39fdf86c2a673666a
TLSH
T190D0A7D2C861442C43605AB56D61621D480DB914BB425C007AD924B81CC5B469C56698
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_1\manifest.json
Size 1KB
SHA256 4dc8cf07548e8abda9ccaed742ce955a4cce2b524abf4a2a73a5411c22aa567c
MD5 124cc582dfc3fd010c17716d8cbc84c5
SHA1 566beb4a69587fdda3f7652edf04eea82227257f
SHA512 a26ca90bb43674a571bf555df9f3e421f7dce83b0d0ab7a7192fe5e1dcb69493abe2f1cafcf2e0370d46822aea5ffacdec7fd157c11f6242a930d82d8291574e
TLSH
T19B31DC17C468A97F55345B18BC350A43FA68636F1A009D8F35BEC09CDFB172B018654C
MD5 SHA1 SHA512 TLSH

Submit Download

06b6c09d-5c62-4c0a-9120-6ef75e80d669.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\06b6c09d-5c62-4c0a-9120-6ef75e80d669.tmp
Size 27KB
SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
MD5 ee77c4eb6b9e8b98db1acf41ba32c064
SHA1 c44316ff0f61c9a7f27f72bc31925ab992de4f6f
SHA512 ac0d2ae2afeeb0d82f75e86af6580c804c53abe3701734c7ad5e34bdfa4aa9144fc293a4c3d32207d3f0c70b9e3744ed8bee09cfbf96dc8ac825734537d04818
SSDEEP 768:90haQ3glH/EKEi+B4MfgL2BYb8Ohg70q6XnKa9UgEUjJY99yVnX3akrtSX:90haQ3glH/1Ei+B4MfgL2Bo8Ohg70q6m
TLSH
T1DEC286C2D8C00264EC592F75257B1D39112BBFBABDB8B24DDE4DB1757BB32D24126A02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0714c9bc-e27b-40ba-9271-0c53051b6643.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\0714c9bc-e27b-40ba-9271-0c53051b6643.tmp
Size 27KB
SHA256 353f070543d1c43247d565c23d4c0346a8d65d902aa7bae04c6ae5e64bc5cde7
MD5 ccd9f3e1f74f2028805e3fea6ad9b934
SHA1 f5bc2ea0c0c3d89c7f37792cc43fe592f8bec748
SHA512 ce32e58b002e2f7fe1649ca2ef4dab2a3ff9c738c11f010a9a837a5e7eb338d03672c325636c87659fa19f75625cebd9dc2602b428bc6d1e2d0799230d81c824
SSDEEP 768:3F1F0kh7RCnrrh1q9i1coUSeJ1xM9eK3ZSk5:3F1F0k9RCnrrh1q9i1coUSeJ1xM9eSZL
TLSH
T179C297B2D8081F14E698B835EB7B9C0A81F8AD2D1439250FB767BC507D9F64EC983746
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7d5246cb-6469-4ea0-8328-91af037c0f19.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\7d5246cb-6469-4ea0-8328-91af037c0f19.tmp
Size 27KB
SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
MD5 1f17cac9ff7b6851ed5bc95c2625596e
SHA1 1a2f1ff883d5110a96e252b88784a00789e88add
SHA512 87539de5cb743b9823566a3c9bdfa8e43c4d78db761b40215e3483a8e0e155af22f057c4de290d9343459ba44a5a5cefacd53aa4fdaf032ee16f88e7039157cc
SSDEEP 768:+IsX2btgY8GIZbTbg4wjs2W0dWvlSNqv:+X2btg3vZPV60
TLSH
T117C2D773FF4CB61EC5C832B4C04A874561AFBF8C61725607B97C7E997B4E0438856A2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8876fc5c-00e3-4d3c-8225-165d02f44058.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\8876fc5c-00e3-4d3c-8225-165d02f44058.tmp
Size 27KB
SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
MD5 20592c0bbc8cff757ec1ba508ee277bf
SHA1 7465050f95649e3bf662ebad10de27a9bef6a3dd
SHA512 c50dc6adc0aa4f0b80bfcc9bfa774c5d1a14e1cd3e889c924d3bfdcfa16c96b34f80dfdadde662ed87c0f33b37f59eaa151706e949641a24104c3583fc962cbc
SSDEEP 768:1VUpNy4heVwCSvh97oYHSI4R7VIO8BkM8s:3UpNy4heVwCSvh97zHSR7VIO8BN8s
TLSH
T149C2FFC2C8C54658EDA95F3460770D3D466BBFB9FEB8B54E8A8CB0717BB32C20426546
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a34f09d-7fef-4966-9984-75d835779928.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\9a34f09d-7fef-4966-9984-75d835779928.tmp
Size 27KB
SHA256 b8f0a6164e126d0f70798a96f456487080b5473bee571bb9594600f8a53901c7
MD5 c7828175f89c5a3ada16fc7817c80af8
SHA1 e6e6f4dd36fb419cb311093dadf8acb61db1d30e
SHA512 b68e7b8c42c6d571487841ad41148f7452e970b295516fe025744f7bbc8d0d7986699b41d5f71a6b43fd4ac28b6a216e24c19820ab01817c4bcfd50677fe7541
SSDEEP 384:OwU2+wy7Pxdr6zfM1dGSwrI7dG91rfprU87MJzeax:f1+V7jrI7IeywMoy
TLSH
T15EC21EE360CA08D9FFDF25F155861ACBD09BBB774A262178138363A5D3E4D20D5ABB01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c2351fa1-b6d3-44d9-8ec2-b48bdd9acadc.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\c2351fa1-b6d3-44d9-8ec2-b48bdd9acadc.tmp
Size 27KB
SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
MD5 dd8e6df155a2ff5f53f81679d8701c70
SHA1 392045fa8c2bbc94b569ea3a70068c8dc8d34826
SHA512 bb1b9a80f15288056a5792ab509451e841c7ad7b654fa7bd5b862bdf298ea8421c201b237d9cb4f0b64d46c40d0bbbc229161730eca3d5d957e12be515764145
SSDEEP 768:eF2AR0FEDVua3n5F5chXL3tbF/a0YFFle/Y:jFFC1qL3rYFFleQ
TLSH
T1D2C2A85294CBFA07C379F6734ADA0DBBC3B38D0BAD904664D2E8B47CD8B92845D045AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86244250-eead-4819-8b34-f7b1db121535.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\86244250-eead-4819-8b34-f7b1db121535.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
Size 15KB
SHA256 4f08f7c782c6cb5ca538fe9269e3a8dc0c26da4a8ebe7cadd24d49733ecd8dc4
MD5 f34a74c76b6f1cf3c277c3cfb531fbb5
SHA1 041fe527ef8703de636abdbe0385b45b8635caf9
SHA512 05a21bc6a6f827b18a4897ad22b2a97dd521da416dbb6daab664784f9d67feae192563524a7ea3401ba9cc998bad581a94cf2db21c415b304d494497039566f7
SSDEEP 192:4/KX1YNHJLHDAz2lCxn0Sn7ZLXtofYnK8hZRz7QQ2eXMqZjfQs/FJ63Fn762wf9G:4/YTXQ9fMm5G8zLStm5Hj
TLSH
T12962434AA4609DBA05D6E53AE550F73BF2D90010D660ADE8F2FDD83D00CB2DDA5229D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
Size 10KB
SHA256 743b573d6edac12e9ebeac45ecda610c6a0ef3b5a73eff41be9af46f76614aeb
MD5 cf5f2720b0dc72ae913997a24c927702
SHA1 3dce1d93366e83f4a64870988188fd624575884e
SHA512 557b59c9697a7aa9a3187a70fbd4ab00728aba69220c2947e31570e665443672b778e055ee55eddb793f4d5f274deb160fe81114110f6e1515be417be1bd27d6
SSDEEP 192:M2tX1thZRz7QQ2eXMqZjfQs/FJ63Fn762wf9LdLU548b+WNOAcpzdetyIsn2agpJ:MgXQn8zA7pJ
TLSH
T1EF32554A94749DBB0CC6E525EA50B767F2E90020E561BDE8F7F8D82C14CB2CD6532AC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
Size 15KB
SHA256 f751b32a325ca63e58a386d7353ff1e2393def7c3185410978d6b2d34ea19175
MD5 8774dce9301b2a889032e59456909225
SHA1 f924e7386e1c92abbe35924a5d43ce802b20a2b5
SHA512 722664dcd2c9a3a1b3bc7a9216bf8eb0cfe7bcb4c6d5d568fb15ae88308dfbe0c78affa82139b84bc75f2933213137617be1439fd27b0c0569387a865e55a03d
SSDEEP 192:b+WYXKCYNHJLHDAz2lCxn0Sn7ZLXtofYnK8hZRz7QQ2eXMqZjfQs/FJ63Fn762w7:SWcTXQ9fMm5G8zLSOm5Hj
TLSH
T1E472534AA8609DBA05D6E53AE550F73BF2D90010D660ADE8F2FDDC3D00CB2DDA5229D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
Size 86KB
SHA256 f30d9cdc88580a84befbce6bbc88f66ac9bc38349066691afc66afd9cc41fcd7
MD5 926ae25f872a35b5e2f92cd04ea0db7e
SHA1 f209df084b74edc0502f10f526500020517f1a85
SHA512 18503950fcf196d70c2b07f0a460c013c96d891a3fba5e07ddd250db720fb6b2eeeee1efe394162cff4b9526c77ccd2e56dd4440f990c6391f59134f52ea95ff
SSDEEP 1536:0HdH56hHCkHTay4Hyu2HKIHYILHhHFOHjkJCHWCkvocXTSHEHssOfnUHVNH9HUHE:66wjiUmyCTDATj7Gi2
TLSH
T1E283C8E6CCCD9F758FD98BB8DC36A72798D40405AFEC9E14A7F9805C0386685213F686
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
Size 112KB
SHA256 87938f28cbe3a18dfce42f1f05f1323b0eefd80bec4b6649887d4fa4269d1eba
MD5 49b8673cf4ec6ef5f25ea3d726cdb06b
SHA1 e9de1e3ff4a83c5ba848dece02475c05e6a7c804
SHA512 faa1d3ab4aee77f5698cb03a031f98eeab392f70bb6e578cec4a4d27cdf7b3ebad5cab51fa12e35734c5d8f2c4ffccaf8400ffd0654bf78131077c774b22a98b
SSDEEP 1536:XEYwsS9ds8JaqnHdH56hHCkHTay4Hyu2HKIHYILHptHlHFOHjkJCHWCkvocXTOvR:XEYwfdsI736wji4myCTDATj7GIN
TLSH
T18EB3FAEACCCD9E758ED88BF8DC36A76788D40115AFAC9F1497F9804C0386685117F68B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

17f9a071-3ba9-4e6e-a90d-64e0b73dc2a3.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\17f9a071-3ba9-4e6e-a90d-64e0b73dc2a3.tmp
Size 72B
SHA256 d654391a6885fb478d3797448fcd13d50434e9c8a53492c70cc61f9e97d29d57
MD5 d7cfd82f4b0b48892378e92a1a373bad
SHA1 cc7242a071b10ad6e563bd853d3cfdd83e07747e
SHA512 7e79418ff0549640b5c7e3c2cfac91d4ca4ed05b6bac4b6aff8d6c3345127712c1ad297b9669fc13be9f98652071cc79d66166f5db2065484ffea5e4a89ce30a
TLSH
T1AAA0021502448110C50003F138829B8D1A01BD298001121776D0034A8C6505849D3184
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 48B
SHA256 634ca15ab6bd3a2a674ef2f4f82128432510d178d3fd23e086b5483b3e77a52d
MD5 d59f47cb3e2db4496836ded1aa90d35f
SHA1 f7519f60ac0320bfde0ae2e0b6dee210d68d9e6e
SHA512 f277ebefc3ec2d5c80d2cc6bca9fbf39e6f2e20da4ddbf9a990e141bac068a50b7908d88537463ae1e3d7188d8ee2a09ea0b013b8b0eb94804e776a72e63998f
MD5 SHA1 SHA512

Submit Download

2e54515d-9e63-4a53-95dc-a568f2df6a1e.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\2e54515d-9e63-4a53-95dc-a568f2df6a1e.tmp
Size 381B
SHA256 a7b87342143da9a37c5f668882a206b7df6bbd5e732c22474e976c30d80480ee
MD5 086823cb642ee440d0e8990d23d470c1
SHA1 b6c0419be707de7759a795befbc5292b44b2c324
SHA512 5529517ba291f5fab19ecbccc902450da63bc891a154f73ec76fad92335877b541ae78e48042dc284abea7eb05d05399568e02a998b7ba5fde31327b7df756a7
TLSH
T126E0600A4CB6C3FFC02BF1F1850C0D0184436C160F28CE8A4AE957993C2B0E4AE0BA25
MD5 SHA1 SHA512 TLSH

Submit Download

8d307618-5b55-494f-b1ef-7592904749fc.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\8d307618-5b55-494f-b1ef-7592904749fc.tmp
Size 381B
SHA256 b8479a3737f332d508f18db5ad3598702d92d29c1e223f3bfb0339a1b0c62020
MD5 eff71c7e5416c4bb8b2f9b9fdf917f8e
SHA1 6304b765c3ad32f18cf3d61922226e9973649613
SHA512 7042cef9d8aa613c9089fbda43efb342e8e7bbe9a784aef5aa20d64bbc61ac94cb35221cad4591d009532ded06e876982ebc528d8c1460ea55d0bd0fda549d9a
TLSH
T1D9E0AB38D130059692B125CA642319D8860A9F08DA3D9413A0689E34236D2730165730
MD5 SHA1 SHA512 TLSH

Submit Download

session_38fbadd5-57ce-418e-9c76-0b773eba49b2.raw

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_38fbadd5-57ce-418e-9c76-0b773eba49b2.raw
Size 1KB
SHA256 a57da016f0638bc11f13c5c5f3e1bde77b405a9a1e9082327ee20f0100ece8d5
MD5 66721532a60c299af38540f77d8dd0cb
SHA1 799aec5ca482b5a83ce4dd850622f1814ee2176b
SHA512 7944997715a155047536c8ff28f5ac74fbb38740328b45abc7e4c9c5901bb7ca5ba5baf60d892cba699703ae3e4cac08ba5cf657f1b83638c7bed564c9ee74a6
TLSH
T1DB31A721EA00F367ACAA91C56D73598E21792260C9254622A9C7BB95F4DD21305B245D
MD5 SHA1 SHA512 TLSH

Submit Download

session_38fbadd5-57ce-418e-9c76-0b773eba49b2.raw

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_38fbadd5-57ce-418e-9c76-0b773eba49b2.raw
Size 1KB
SHA256 3e633de6b9246c3d93cac2ff248880e8b952d9b746a14f77c233e7cc9965461e
MD5 1c44e66ac3c1dd2c034bed75392e0eb8
SHA1 b30abad25baac840b52a9fd2becaf307ae006921
SHA512 93dc20c9a1d9e8c0004d9d358bc05234900f5e1d5437f4126a0bbe010a97583bb5448ad3ead93c2389831fadfeb06ae8ec854090ca961ee53dd5e5ea91774274
TLSH
T10521C6413CB8EBA594DF8B7B80C736612A6C083E04697C25DC9BD0A63109EC9C77A378
MD5 SHA1 SHA512 TLSH

Submit Download

session_38fbadd5-57ce-418e-9c76-0b773eba49b2.raw

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_38fbadd5-57ce-418e-9c76-0b773eba49b2.raw
Size 1KB
SHA256 fe2d98ef96b4aff3e9ca6a2130c59055e85ede7f4b56bf726671b666d71e086f
MD5 a5956eb1dcbf3110d7f901aa3bc01a9b
SHA1 769021edd95290368e1ecd26d60e62b3fbf0b16d
SHA512 aabb985d010a2ce32d7acb6dd9546ee395ddaa7987139a81ad51945ec8ac20b8de819fb764e094b241e8aba80d032fff09a30c050a05de32e6b843709a75d30c
TLSH
T19A21E976A48959496400370D2627EB6B853B62541C63AE1638937970C1D3CEC3C61F95
MD5 SHA1 SHA512 TLSH

Submit Download

session_38fbadd5-57ce-418e-9c76-0b773eba49b2.raw

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_38fbadd5-57ce-418e-9c76-0b773eba49b2.raw
Size 493B
SHA256 b2e0679e64b07d3d1aae901c77243254d1e9e2c55dc8e0c7cd25e123402bf259
MD5 de2c401cbf9e99c83be03ec837786476
SHA1 938cd145fd822f7ab8bb1d6b35be224f4d2c4c0f
SHA512 49f6be8f67b0df36bd0df67e4c31afc23241337109f29c900eabe3366329be025f4d77840d5d4f17d316d5dbc224fbc6bbbdff50170d75dd30362f4143e3d762
TLSH
T1A7F0D4E097203F70F3076DA142EB7521DABED206FB4464DB134A659D9498D8DBDC0331
MD5 SHA1 SHA512 TLSH

Submit Download

session_38fbadd5-57ce-418e-9c76-0b773eba49b2.raw

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_38fbadd5-57ce-418e-9c76-0b773eba49b2.raw
Size 605B
SHA256 1e4222e3ad5e6b8f95cfb9b1b96d9b2d637cbea8a20c2525feb2ba5d163f6326
MD5 e442c92edd1a798a7fe03923c74121a7
SHA1 827c77d932ee6c8d9f7834551364a150044d3aa8
SHA512 a45a50149616ec088c00b0f0cb68d2d5e7c13a573cdece4ce9b910691bec1ad17327fe8fbf651d12b3dc51bec31445d09d6fe8afdf1c1b7b086feff7a871ecf2
TLSH
T171F047855A5D22D11F5225C131C5696012B26B1878B1777AF340F57BAE94CE26512703
MD5 SHA1 SHA512 TLSH

Submit Download

session_38fbadd5-57ce-418e-9c76-0b773eba49b2.raw

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_38fbadd5-57ce-418e-9c76-0b773eba49b2.raw
Size 765B
SHA256 66b4098b54927fd5182a7712a708a61956ab6e8cec3ac3a27fb4489ef8d128a4
MD5 2f4a2aea849b801a72b178a82bd8aaa2
SHA1 97f99722c266a17ac8f375775ba4872cf7c19065
SHA512 00ee70053144e9d21df113edd818cc62f1182bc1f178c83dc790d0f8f437af950a8ea0b06a6650bca4d03381c45ca421898ee6786e77928a875368f3256878cc
TLSH
T1E90175BB35782307A0881D7CD5100C21FE95D54CF9CECFDAC581814A03D535A4CB5884
MD5 SHA1 SHA512 TLSH

Submit Download

session_38fbadd5-57ce-418e-9c76-0b773eba49b2.raw

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_38fbadd5-57ce-418e-9c76-0b773eba49b2.raw
Size 1KB
SHA256 d05e8058947d3c0b7118a03646371a7474ab39610770c5bed788bffb4b8d37dc
MD5 25187852cb9f56aca30b81474f857819
SHA1 925538b67327188303b470841ee215e549f116b7
SHA512 62f5f90d494bbd8739f5dbe2ece4332ec238198a8622567251f44d173a3c39c971ecfeb311af824df41a4a405253d8d38f299228a0e7608c7888dea7d30c8f09
TLSH
T13B21BA0C78549A02B3627D51E72E28B5DD9CB6A0D6C5E6B34FC663D853A9E570170508
MD5 SHA1 SHA512 TLSH

Submit Download

session_38fbadd5-57ce-418e-9c76-0b773eba49b2.raw

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_38fbadd5-57ce-418e-9c76-0b773eba49b2.raw
Size 781B
SHA256 86f242b958050affa5b721f211a736d71b112d83bd75d13682b9e6723ea81171
MD5 6a020e879c297b3a2bdec818c48412b3
SHA1 68e45214b9b7fd2ebf7983a74393c33e53e9412a
SHA512 886628c5640b2d7776c78503967d52e735b315918449ca4b6ba05bf0b8e100bd0e5983b96439c29429d719468f9691c2bf0ab72a4af0c9d81cf77735203be85f
TLSH
T1CF0175A04B8488C3C1C0EE8658B3BE21C8D797B05503603E43A021DF8CE3576984AAA6
MD5 SHA1 SHA512 TLSH

Submit Download

session_38fbadd5-57ce-418e-9c76-0b773eba49b2.raw

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_38fbadd5-57ce-418e-9c76-0b773eba49b2.raw
Size 781B
SHA256 c891239a37466924c234670e901f6c58f91274f27f0270493998e3402db7bb0c
MD5 60fac78e623751fbc46540ce82a357cb
SHA1 b2c1c9240d789d6bcc861e8e85efb472687a2c51
SHA512 5324d76168a5544b818a4ee28d97834ec1f3488324a9c4291394d8fa8e55ca7fcc00de9c1243ebf0ac6599f5a93b95e5d2ffe197cf3e1545d1c0cbd0d62bc0bd
TLSH
T1010175DE91010432327252E0C79E065CC0A225A7F599EAE28A84D99C1D6333AC6BE1F9
MD5 SHA1 SHA512 TLSH

Submit Download

session_38fbadd5-57ce-418e-9c76-0b773eba49b2.raw

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_38fbadd5-57ce-418e-9c76-0b773eba49b2.raw
Size 957B
SHA256 87731d359e400ef7f7bb6c2c07c81fb339c96fb3de0270da8840810be1142c9e
MD5 ca6016ff5c9dc10ec92cf658dcae912a
SHA1 d9f641defa1621f9e054787c871f607108f083fa
SHA512 ba9d58620febbb2928341596b0f44d4117c29bd78acbdb49b310f6ae07cfcab9aaee11afb258e954f0d9444dccaac753a8ca5185ac64dee40e2934d07d56569d
TLSH
T13211C4404A2008A6ADAF06C527AA47EF872F83D718D668A14E202BE23218F9334C0A1C
MD5 SHA1 SHA512 TLSH

Submit Download

session_38fbadd5-57ce-418e-9c76-0b773eba49b2.raw

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_38fbadd5-57ce-418e-9c76-0b773eba49b2.raw
Size 1KB
SHA256 1d75e645b08d6d099d8ae555081930f536d8195f86b83f64f53e45c5b61b5b47
MD5 7e75fa8413867acccf38b61df66142d6
SHA1 cff5098eebe9fff5e8d9407f6103dde49dbd7fd0
SHA512 b682c185e66e43132a18b6c88ad463c369b81743ca31d8f3f29234a9aa22de4432382175d6ccb335ebfd232993c8df59362e4d80f5f8e257a11e323f3138311c
TLSH
T1CE211A3C83EB3312510623A9528E0318F8498A376EC4612626683735041DFA7E1E7533
MD5 SHA1 SHA512 TLSH

Submit Download