20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7

Analysis

user interaction
yes
max time kernel
135s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/08/2026, 21:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
OperaInstaller.exe
Size 178KB
Sample260812-1bmvwavepg
SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
MD5 4ef32b114eaa6f05340b46d0f48154c7
SHA1 a07219dc2a0fa96f5f9a03b1bb350c9ab2679d3f
SHA512 6631937f30fcfdc536bd14735870c9c4592f4414e9c1d71ec69c718bf341ff286174b782c6a23a6c29744be940bcac34aa93845e60727e090bee8423d738ea9d
SSDEEP 3072:IYHHEa1Lz5KhEwh5kc9+5sFoq0X/r6LGV4RxJ0OZnS+Rl//bRRlTHGVJp99vqRy:IYEwP5KhVyc9esFoBvum4RvGJTEy
TLSH
T1EB046B823AC184B5E5B244321864DBB19A7DFC700F65D9DB73987A3B5DB02C09932F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery persistence privilege_escalation spyware stealer trojan

Malware Config

Signatures

Downloads MZ/PE file 2 IoCs

flow	pid	Process
68	3608	installer.exe
21	4312	OperaInstaller.exe

Checks computer location settings 2 TTPs 6 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\Control Panel\International\Geo\Nation	opera.exe
Key value queried	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\Control Panel\International\Geo\Nation	OperaInstaller.exe
Key value queried	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\Control Panel\International\Geo\Nation	opera.exe
Key value queried	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\Control Panel\International\Geo\Nation	opera.exe
Key value queried	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\Control Panel\International\Geo\Nation	opera.exe
Key value queried	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\Control Panel\International\Geo\Nation	opera.exe

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Executes dropped EXE 29 IoCs

pid	Process
2312	OpInst.exe
3608	installer.exe
3084	installer.exe
1892	installer.exe
2932	installer.exe
4368	installer.exe
3228	Assistant_130.0.5847.41_Setup.exe_sfx.exe
1324	assistant_installer.exe
1812	assistant_installer.exe
976	installer.exe
2340	installer.exe
208	opera.exe
1940	opera_crashreporter.exe
2408	opera.exe
3940	opera.exe
4612	opera.exe
1536	opera.exe
5064	opera.exe
4344	opera.exe
2480	opera.exe
840	opera.exe
3516	opera.exe
5636	opera.exe
5844	opera_crashreporter.exe
5616	opera.exe
5756	opera.exe
5980	opera_crashreporter.exe
6076	opera.exe
6084	opera.exe

Loads dropped DLL 39 IoCs

pid	Process
1324	assistant_installer.exe
1324	assistant_installer.exe
1812	assistant_installer.exe
1812	assistant_installer.exe
208	opera.exe
208	opera.exe
2408	opera.exe
2408	opera.exe
3940	opera.exe
3940	opera.exe
2408	opera.exe
2408	opera.exe
2408	opera.exe
2408	opera.exe
2408	opera.exe
4612	opera.exe
4612	opera.exe
1536	opera.exe
1536	opera.exe
5064	opera.exe
5064	opera.exe
4344	opera.exe
4344	opera.exe
2480	opera.exe
2480	opera.exe
840	opera.exe
840	opera.exe
3516	opera.exe
3516	opera.exe
5636	opera.exe
5636	opera.exe
5616	opera.exe
5616	opera.exe
5756	opera.exe
5756	opera.exe
6076	opera.exe
6076	opera.exe
6084	opera.exe
6084	opera.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Opera Stable = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" --autostart"	opera.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Opera Stable = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" --autostart"	opera.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Enumerates connected drives 3 TTPs 6 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\F:	installer.exe
File opened (read-only)	\??\D:	installer.exe
File opened (read-only)	\??\F:	installer.exe
File opened (read-only)	\??\D:	installer.exe
File opened (read-only)	\??\F:	installer.exe
File opened (read-only)	\??\D:	installer.exe

Drops file in Program Files directory 6 IoCs

description	ioc	Process
File created	C:\Program Files\scoped_dir208_1204158351\opera-one-dark.jpg	opera.exe
File created	C:\Program Files\scoped_dir208_1204158351\persona.ini	opera.exe
File created	C:\Program Files\scoped_dir5756_1730603426\opera-one.jpg	opera.exe
File created	C:\Program Files\scoped_dir5756_1730603426\persona.ini	opera.exe
File created	C:\Program Files\scoped_dir208_1592541912\opera-one.jpg	opera.exe
File created	C:\Program Files\scoped_dir208_1592541912\persona.ini	opera.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 6 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	assistant_installer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	assistant_installer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	DllHost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	OperaInstaller.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	OpInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Assistant_130.0.5847.41_Setup.exe_sfx.exe

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3940	opera.exe
6076	opera.exe
1536	opera.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	opera.exe

Enumerates system info in registry 2 TTPs 39 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	installer.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	assistant_installer.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	installer.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	installer.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	installer.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	installer.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	installer.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	assistant_installer.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	opera.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	opera.exe

Modifies registry class 43 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\OperaStable\shell	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\OperaStable\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" -noautoupdate -- \"%1\""	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\OperaStable	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\OperaStable\shell\open\command	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\OperaStable\shell\open\ddeexec\Application	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\.xht\OpenWithProgIDs	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\OperaStable\shell\open\ddeexec\	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\OperaStable\shell\open\ddeexec\Topic	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\.opdownload\OpenWithProgIDs	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Applications\opera.exe\shell	installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\.htm\OpenWithProgids\OperaStable = "0"	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Applications\opera.exe\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" \"%1\""	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\OperaStable\DefaultIcon	installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\.pdf\OpenWithProgids\OperaStable = "0"	installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\.xht\OpenWithProgIDs\OperaStable = "0"	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\.xhtml	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Applications\opera.exe\shell\open\command	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\.opdownload	installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\.opdownload\OpenWithProgIDs\OperaStable = "0"	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\OperaStable\shell\open\ddeexec	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32\ServerExecutable = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\134.0.5954.56\\notification_helper.exe"	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\OperaStable\shell\open	installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\.xhtml\OpenWithProgIDs\OperaStable = "0"	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Applications\opera.exe\shell\open	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\WOW6432Node	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\WOW6432Node\CLSID	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\OperaStable\shell\open\ddeexec\Application\	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\OperaStable\shell\open\ddeexec\Topic\	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\.shtml	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Applications\opera.exe	installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\OperaStable\URL Protocol	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\.xhtml\OpenWithProgIDs	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Applications	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\134.0.5954.56\\notification_helper.exe\""	installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\.html\OpenWithProgids\OperaStable = "0"	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\.shtml\OpenWithProgIDs	installer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\.shtml\OpenWithProgIDs\OperaStable = "0"	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\.xht	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\OperaStable\FriendlyTypeName = "Opera Web Document"	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\OperaStable\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe,0"	installer.exe

Modifies system certificate store 2 TTPs 5 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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	installer.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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	installer.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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	installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4	installer.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 0f00000001000000300000004ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e1996530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b060105050703080b00000001000000320000004400690067006900430065007200740020005400720075007300740065006400200052006f006f0074002000470034000000620000000100000020000000552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988140000000100000014000000ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f1d0000000100000010000000a86dc6a233eb339610f3ed414927c559030000000100000014000000ddfb16cd4931c973a2037d3fc83a4d7d775d05e42000000001000000940500003082059030820378a0030201020210059b1b579e8e2132e23907bda777755c300d06092a864886f70d01010c05003062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f74204734301e170d3133303830313132303030305a170d3338303131353132303030305a3062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f7420473430820222300d06092a864886f70d01010105000382020f003082020a0282020100bfe6907368debbe45d4a3c3022306933ecc2a7252ec9213df28ad859c2e129a73d58ab769acdae7b1b840dc4301ff31ba43816eb56c6976d1dabb279f2ca11d2e45fd6053c520f521fc69e15a57ebe9fa95716595572af689370c2b2ba75996a733294d11044102edf82f30784e6743b6d71e22d0c1bee20d5c9201d63292dceec5e4ec893f821619b34eb05c65eec5b1abcebc9cfcdac34405fb17a66ee77c848a86657579f54588e0c2bb74fa730d956eeca7b5de3adc94f5ee535e731cbda935edc8e8f80dab69198409079c378c7b6b1c4b56a183803108dd8d437a42e057d88f5823e109170ab55824132d7db04732a6e91017c214cd4bcae1b03755d7866d93a31449a3340bf08d75a49a4c2e6a9a067dda427bca14f39b5115817f7245c468f64f7c169887698763d595d4276878997697a48f0e0a2121b669a74cade4b1ee70e63aee6d4ef92923a9e3ddc00e4452589b69a44192b7ec094b4d2616deb33d9c5df4b0400cc7d1c95c38ff721b2b211b7bb7ff2d58c702c4160aab1631844951a76627ef680b0fbe864a633d18907e1bdb7e643a418b8a67701e10f940c211db2542925896ce50e52514774be26acb64175de7aac5f8d3fc9bcd34111125be51050eb31c5ca72162209df7c4c753f63ec215fc420516b6fb1ab868b4fc2d6455f9d20fca11ec5c08fa2b17e0a2699f5e4692f981d2df5d9a9b21de51b0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020186301d0603551d0e04160414ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f300d06092a864886f70d01010c05000382020100bb61d97da96cbe17c4911bc3a1a2008de364680f56cf77ae70f9fd9a4a99b9c9785c0c0c5fe4e61429560b36495d4463e0ad9c9618661b230d3d79e96d6bd654f8d23cc14340ae1d50f552fc903bbb9899696bc7c1a7a868a427dc9df927ae3085b9f6674d3a3e8f5939225344ebc85d03caed507a7d62210a80c87366d1a005605fe8a5b4a7afa8f76d359c7c5a8ad6a23899f3788bf44dd2200bde04ee8c9b4781720dc01432ef30592eaee071f256e46a976f92506d968d687a9ab236147a06f224b9091150d708b1b8897a8423614229e5a3cda22041d7d19c64d9ea26a18b14d74c19b25041713d3f4d7023860c4adc81d2cc3294840d0809971c4fc0ee6b207430d2e03934108521150108e85532de7149d92817504de6be4dd175acd0cafb41b843a5aad3c305444f2c369be2fae245b823536c066f67557f46b54c3f6e285a7926d2a4a86297d21ee2ed4a8bbc1bfd474a0ddf67667eb25b41d03be4f43bf40463e9efc2540051a08a2ac9ce78ccd5ea870418b3ceaf4988aff39299b6b3e6610fd28500e7501ae41b959d19a1b99cb19bb1001eefd00f4f426cc90abcee43fa3a71a5c84d26a535fd895dbc85621d32d2a02b54ed9a57c1dbfa10cf19b78b4a1b8f01b6279553e8b6896d5bbc68d423e88b51a256f9f0a680a0d61eb3bc0f0f537529aaea1377e4de8c8121ad07104711ad873d07d175bccff3667e	installer.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
208	opera.exe
208	opera.exe
208	opera.exe

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: SeShutdownPrivilege	208	opera.exe
Token: SeCreatePagefilePrivilege	208	opera.exe
Token: SeShutdownPrivilege	208	opera.exe
Token: SeCreatePagefilePrivilege	208	opera.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
976	installer.exe

Suspicious use of SendNotifyMessage 10 IoCs

pid	Process
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe

Suspicious use of SetWindowsHookEx 64 IoCs

pid	Process
976	installer.exe
976	installer.exe
2788	DllHost.exe
2788	DllHost.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
2788	DllHost.exe
2788	DllHost.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe
976	installer.exe

Suspicious use of WriteProcessMemory 29 IoCs

description	pid	Process	procid_target
PID 4312 wrote to memory of 2312	4312	OperaInstaller.exe	87
PID 2312 wrote to memory of 3608	2312	OpInst.exe	89
PID 3608 wrote to memory of 3084	3608	installer.exe	92
PID 3608 wrote to memory of 1892	3608	installer.exe	93
PID 3608 wrote to memory of 2932	3608	installer.exe	97
PID 2932 wrote to memory of 4368	2932	installer.exe	98
PID 3608 wrote to memory of 3228	3608	installer.exe	105
PID 3608 wrote to memory of 1324	3608	installer.exe	106
PID 1324 wrote to memory of 1812	1324	assistant_installer.exe	107
PID 2932 wrote to memory of 976	2932	installer.exe	109
PID 976 wrote to memory of 2340	976	installer.exe	110
PID 976 wrote to memory of 208	976	installer.exe	115
PID 208 wrote to memory of 1940	208	opera.exe	116
PID 208 wrote to memory of 2408	208	opera.exe	117
PID 208 wrote to memory of 3940	208	opera.exe	118
PID 208 wrote to memory of 4612	208	opera.exe	119
PID 208 wrote to memory of 1536	208	opera.exe	145
PID 208 wrote to memory of 5064	208	opera.exe	121
PID 208 wrote to memory of 4344	208	opera.exe	122
PID 208 wrote to memory of 2480	208	opera.exe	146
PID 208 wrote to memory of 840	208	opera.exe	126
PID 208 wrote to memory of 3516	208	opera.exe	127
PID 5636 wrote to memory of 5844	5636	opera.exe	129
PID 208 wrote to memory of 5616	208	opera.exe	130
PID 976 wrote to memory of 5756	976	installer.exe	131
PID 5756 wrote to memory of 5980	5756	opera.exe	132
PID 5756 wrote to memory of 6076	5756	opera.exe	133
PID 5756 wrote to memory of 6084	5756	opera.exe	134
PID 5756 wrote to memory of 4576	5756	opera.exe	135

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe
"C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe"
1⤵
- Downloads MZ/PE file
- Checks computer location settings
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4312
- C:\Users\Admin\AppData\Local\Temp\OpInst.exe
  "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:2312
- - C:\Users\Admin\AppData\Local\Temp\7zS809F37E8\installer.exe
    C:\Users\Admin\AppData\Local\Temp\7zS809F37E8\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=OTMzNjM3MDI4ZjFjMGMzZmEzMjJmYTI5ZjM4YmU3M2NhMWYzMmVjNjhmNWE0YzI3OTVhYjMyOTgyZmJjNzVmYTp7ImNvdW50cnkiOiJHQiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijoib3BlcmEiLCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fc291cmNlPXdyayZ1dG1fbWVkaXVtPXBiJnV0bV9jYW1wYWlnbj1zcG90aWZ5X29wZXJhIiwidGltZXN0YW1wIjoiMTc4NjU3MDE4OC41Njk0IiwidXNlcmFnZW50IjoiT3BlcmEgSW5zdGFsbGVyLzEuMCIsInV0bSI6eyJjYW1wYWlnbiI6InNwb3RpZnlfb3BlcmEiLCJtZWRpdW0iOiJwYiIsInNvdXJjZSI6IndyayJ9LCJ1dWlkIjoiNTRlOGRlOGItNjI3MC00ZDJhLTg2MWMtYTM2MTlmNTk4ZjA2In0=
    3⤵
    - Downloads MZ/PE file
    - Executes dropped EXE
    - Enumerates connected drives
    - Enumerates system info in registry
    - Modifies system certificate store
    - Suspicious use of WriteProcessMemory
    PID:3608
  - - C:\Users\Admin\AppData\Local\Temp\7zS809F37E8\installer.exe
      C:\Users\Admin\AppData\Local\Temp\7zS809F37E8\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.56 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff72c6cad88,0x7ff72c6cad94,0x7ff72c6cada0
      4⤵
      Executes dropped EXE
      PID:3084
  - - C:\Users\Admin\AppData\Local\Temp\.opera\88819235-ebed-44c0-a29d-2f7bfcc9297a Opera Installer Temp\installer.exe
      "C:\Users\Admin\AppData\Local\Temp\.opera\88819235-ebed-44c0-a29d-2f7bfcc9297a Opera Installer Temp\installer.exe" --version
      4⤵
      Executes dropped EXE
      PID:1892
  - - C:\Users\Admin\AppData\Local\Temp\7zS809F37E8\installer.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS809F37E8\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=3608 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\88819235-ebed-44c0-a29d-2f7bfcc9297a Opera Installer Temp\opera_package_20260812222950" --session-guid=ad8f7366-c388-4d4f-ab4c-694dbd68b9bc --server-tracking-blob=NWIyNGE0N2NmNmRjMzBiZGExZDAwMWY2MjU1MDkwZjliMjdiMzkxNzBkNjEwMDIzOWQzMjU2OGRjODJhZjIxYTp7ImNvdW50cnkiOiJHQiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijp7Im5hbWUiOiJvcGVyYSJ9LCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fc291cmNlPXdyayZ1dG1fbWVkaXVtPXBiJnV0bV9jYW1wYWlnbj1zcG90aWZ5X29wZXJhIiwic3lzdGVtIjp7InBsYXRmb3JtIjp7ImFyY2giOiJ4ODZfNjQiLCJvcHN5cyI6IldpbmRvd3MiLCJvcHN5cy12ZXJzaW9uIjoiMTAiLCJwYWNrYWdlIjoiRVhFIn19LCJ0aW1lc3RhbXAiOiIxNzg2NTcwMTg4LjU2OTQiLCJ1c2VyYWdlbnQiOiJPcGVyYSBJbnN0YWxsZXIvMS4wIiwidXRtIjp7ImNhbXBhaWduIjoic3BvdGlmeV9vcGVyYSIsIm1lZGl1bSI6InBiIiwic291cmNlIjoid3JrIn0sInV1aWQiOiI1NGU4ZGU4Yi02MjcwLTRkMmEtODYxYy1hMzYxOWY1OThmMDYifQ== --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=5408000000000000
      4⤵
      Executes dropped EXE
      Enumerates connected drives
      Enumerates system info in registry
      Suspicious use of WriteProcessMemory
      PID:2932
    - - C:\Users\Admin\AppData\Local\Temp\7zS809F37E8\installer.exe
        
        C:\Users\Admin\AppData\Local\Temp\7zS809F37E8\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.56 --initial-client-data=0x294,0x298,0x29c,0x264,0x2a0,0x7ff72c6cad88,0x7ff72c6cad94,0x7ff72c6cada0
        5⤵
        Executes dropped EXE
        
        PID:4368
    - - C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\installer.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\installer.exe" --backend --initial-pid=3608 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\88819235-ebed-44c0-a29d-2f7bfcc9297a Opera Installer Temp\opera_package_202608122229501" --session-guid=ad8f7366-c388-4d4f-ab4c-694dbd68b9bc --server-tracking-blob=NWIyNGE0N2NmNmRjMzBiZGExZDAwMWY2MjU1MDkwZjliMjdiMzkxNzBkNjEwMDIzOWQzMjU2OGRjODJhZjIxYTp7ImNvdW50cnkiOiJHQiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijp7Im5hbWUiOiJvcGVyYSJ9LCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fc291cmNlPXdyayZ1dG1fbWVkaXVtPXBiJnV0bV9jYW1wYWlnbj1zcG90aWZ5X29wZXJhIiwic3lzdGVtIjp7InBsYXRmb3JtIjp7ImFyY2giOiJ4ODZfNjQiLCJvcHN5cyI6IldpbmRvd3MiLCJvcHN5cy12ZXJzaW9uIjoiMTAiLCJwYWNrYWdlIjoiRVhFIn19LCJ0aW1lc3RhbXAiOiIxNzg2NTcwMTg4LjU2OTQiLCJ1c2VyYWdlbnQiOiJPcGVyYSBJbnN0YWxsZXIvMS4wIiwidXRtIjp7ImNhbXBhaWduIjoic3BvdGlmeV9vcGVyYSIsIm1lZGl1bSI6InBiIiwic291cmNlIjoid3JrIn0sInV1aWQiOiI1NGU4ZGU4Yi02MjcwLTRkMmEtODYxYy1hMzYxOWY1OThmMDYifQ== --silent --desktopshortcut=1 --install-subfolder=134.0.5954.56
        5⤵
        Executes dropped EXE
        Enumerates connected drives
        Enumerates system info in registry
        Modifies registry class
        Suspicious use of FindShellTrayWindow
        Suspicious use of SendNotifyMessage
        Suspicious use of SetWindowsHookEx
        Suspicious use of WriteProcessMemory
        
        PID:976
      - C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\installer.exe
        
        C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.56 --initial-client-data=0x290,0x294,0x298,0x26c,0x29c,0x7ff751e9ad88,0x7ff751e9ad94,0x7ff751e9ada0
        6⤵
        Executes dropped EXE
        
        PID:2340
      - C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\88819235-ebed-44c0-a29d-2f7bfcc9297a Opera Installer Temp\opera_package_202608122229501\de932af914ba00303d4a2778a383ac9c831101e2.crx"
        6⤵
        Checks computer location settings
        Executes dropped EXE
        Loads dropped DLL
        Adds Run key to start application
        Drops file in Program Files directory
        Checks processor information in registry
        Enumerates system info in registry
        Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        Suspicious use of AdjustPrivilegeToken
        Suspicious use of WriteProcessMemory
        
        PID:208
        
        C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\opera_crashreporter.exe
        
        C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.56 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffbe5cbe310,0x7ffbe5cbe320,0x7ffbe5cbe330
        7⤵
        Executes dropped EXE
        
        PID:1940
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1864,i,15648208104321763928,8435134293995497886,262144 --field-trial-handle=1904,i,13722547036049912483,16776330840861517504,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16695306320984308339,7832373760305507520,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1900 /prefetch:2
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        Enumerates system info in registry
        
        PID:2408
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2232,i,13837903352591566243,10090416155189244362,524288 --field-trial-handle=1904,i,13722547036049912483,16776330840861517504,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16695306320984308339,7832373760305507520,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2244 /prefetch:3
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        System Time Discovery
        Enumerates system info in registry
        
        PID:3940
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2504,i,1202301501446124706,17763964121259428074,524288 --field-trial-handle=1904,i,13722547036049912483,16776330840861517504,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16695306320984308339,7832373760305507520,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2516 /prefetch:8
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        Enumerates system info in registry
        
        PID:4612
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3564,i,5735744405512987962,11525246752344826762,2097152 --field-trial-handle=1904,i,13722547036049912483,16776330840861517504,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16695306320984308339,7832373760305507520,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3780 /prefetch:2
        7⤵
        Checks computer location settings
        Executes dropped EXE
        Loads dropped DLL
        Enumerates system info in registry
        
        PID:1536
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4276,i,5781844563219151193,12222429716333534795,524288 --field-trial-handle=1904,i,13722547036049912483,16776330840861517504,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16695306320984308339,7832373760305507520,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4336 /prefetch:8
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        Enumerates system info in registry
        
        PID:5064
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4288,i,13766832601497960686,11622842125693827878,2097152 --field-trial-handle=1904,i,13722547036049912483,16776330840861517504,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16695306320984308339,7832373760305507520,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4356 /prefetch:2
        7⤵
        Checks computer location settings
        Executes dropped EXE
        Loads dropped DLL
        Enumerates system info in registry
        
        PID:4344
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3532,i,4268515208713912915,11052860204781290685,524288 --field-trial-handle=1904,i,13722547036049912483,16776330840861517504,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16695306320984308339,7832373760305507520,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4624 /prefetch:8
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        Enumerates system info in registry
        
        PID:2480
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3948,i,5373114007019077417,16726129061721502158,524288 --field-trial-handle=1904,i,13722547036049912483,16776330840861517504,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16695306320984308339,7832373760305507520,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4752 /prefetch:8
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        Enumerates system info in registry
        
        PID:840
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4928,i,346817871594931089,17340503006819145085,2097152 --field-trial-handle=1904,i,13722547036049912483,16776330840861517504,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16695306320984308339,7832373760305507520,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4956 /prefetch:2
        7⤵
        Checks computer location settings
        Executes dropped EXE
        Loads dropped DLL
        Enumerates system info in registry
        
        PID:3516
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4744,i,17401095135432113750,2268224229087400924,524288 --field-trial-handle=1904,i,13722547036049912483,16776330840861517504,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16695306320984308339,7832373760305507520,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4592 /prefetch:8
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        Enumerates system info in registry
        
        PID:5616
      - C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\88819235-ebed-44c0-a29d-2f7bfcc9297a Opera Installer Temp\opera_package_202608122229501\additional_file2.tmp"
        6⤵
        Checks computer location settings
        Executes dropped EXE
        Loads dropped DLL
        Adds Run key to start application
        Drops file in Program Files directory
        Checks processor information in registry
        Enumerates system info in registry
        Suspicious use of WriteProcessMemory
        
        PID:5756
        
        C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\opera_crashreporter.exe
        
        C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.56 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffbe5cbe310,0x7ffbe5cbe320,0x7ffbe5cbe330
        7⤵
        Executes dropped EXE
        
        PID:5980
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1964,i,6313221266987308636,7368627964084069149,524288 --field-trial-handle=2080,i,3973839057212905032,6027121551563496660,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2084,i,12564383616725672472,2190501246348785909,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2112 /prefetch:3
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        System Time Discovery
        Enumerates system info in registry
        
        PID:6076
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1744,i,2366580744416470472,17922055266147064854,262144 --field-trial-handle=2080,i,3973839057212905032,6027121551563496660,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2084,i,12564383616725672472,2190501246348785909,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2072 /prefetch:2
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        Enumerates system info in registry
        
        PID:6084
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2516,i,9891994911199014185,14570649422991443847,524288 --field-trial-handle=2080,i,3973839057212905032,6027121551563496660,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2084,i,12564383616725672472,2190501246348785909,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2684 /prefetch:8
        7⤵
        
        PID:4576
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3912,i,13858015016617128055,6357717450223568557,2097152 --field-trial-handle=2080,i,3973839057212905032,6027121551563496660,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2084,i,12564383616725672472,2190501246348785909,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3440 /prefetch:2
        7⤵
        
        PID:5268
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4064,i,10362503116163343089,13598526159753890177,524288 --field-trial-handle=2080,i,3973839057212905032,6027121551563496660,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2084,i,12564383616725672472,2190501246348785909,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4128 /prefetch:8
        7⤵
        
        PID:5248
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4152,i,2347466451127482708,4820941245666480768,2097152 --field-trial-handle=2080,i,3973839057212905032,6027121551563496660,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2084,i,12564383616725672472,2190501246348785909,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4212 /prefetch:2
        7⤵
        
        PID:5256
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3888,i,14735179895779728179,5927104064705293160,524288 --field-trial-handle=2080,i,3973839057212905032,6027121551563496660,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2084,i,12564383616725672472,2190501246348785909,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3924 /prefetch:8
        7⤵
        
        PID:5388
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4664,i,780494224556988679,3150213097500418811,524288 --field-trial-handle=2080,i,3973839057212905032,6027121551563496660,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2084,i,12564383616725672472,2190501246348785909,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4832 /prefetch:8
        7⤵
        
        PID:5420
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4200,i,6537140319204277143,3427045328632721577,524288 --field-trial-handle=2080,i,3973839057212905032,6027121551563496660,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2084,i,12564383616725672472,2190501246348785909,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4224 /prefetch:8
        7⤵
        
        PID:3236
      - C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
        6⤵
        
        PID:5340
        
        C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\opera_crashreporter.exe
        
        C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.56 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffbe5cbe310,0x7ffbe5cbe320,0x7ffbe5cbe330
        7⤵
        
        PID:5648
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1952,i,3398922743409011028,5174735886879601916,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2156 /prefetch:3
        7⤵
        System Time Discovery
        
        PID:1536
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1684,i,4400351006853162160,8910943190072933735,262144 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2112 /prefetch:2
        7⤵
        
        PID:2480
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2484,i,15796155676661310383,11835923482877048353,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2684 /prefetch:8
        7⤵
        
        PID:5960
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3268,i,12171655226007907942,8771354963764315527,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3400 /prefetch:8
        7⤵
        
        PID:212
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3348,i,3560743968184380583,15951794381926413749,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3452 /prefetch:8
        7⤵
        
        PID:5684
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3360,i,17704780342235966679,149256502132637711,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3472 /prefetch:8
        7⤵
        
        PID:5812
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3384,i,9530804072644136440,16652008804255990856,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3512 /prefetch:8
        7⤵
        
        PID:5808
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3324,i,15596696974284501223,3374683071613194109,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3412 /prefetch:8
        7⤵
        
        PID:5552
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3336,i,14758844724709570112,2991188919609167195,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3432 /prefetch:8
        7⤵
        
        PID:5380
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3372,i,1275822774066080984,18153463531866713680,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3492 /prefetch:8
        7⤵
        
        PID:5740
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4204,i,14611384164954720095,17309090587318171926,2097152 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4212 /prefetch:1
        7⤵
        
        PID:2452
        
        C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\opera_gx_splash.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
        7⤵
        
        PID:2036
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4676,i,12742154769016535084,11127047561479344483,2097152 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4684 /prefetch:2
        7⤵
        
        PID:5716
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4840,i,8158516149744928945,16778604828384864517,2097152 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4860 /prefetch:1
        7⤵
        
        PID:5712
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5164,i,12462929741852987803,3277215367480155778,2097152 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5176 /prefetch:1
        7⤵
        
        PID:5776
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5312,i,5385502659107898062,13080791651938033755,2097152 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5320 /prefetch:1
        7⤵
        
        PID:5136
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5996,i,893925651285228528,18144146298659446699,2097152 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6004 /prefetch:2
        7⤵
        
        PID:5676
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5892,i,6253973015243923873,17444162320556832211,2097152 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5864 /prefetch:2
        7⤵
        
        PID:2808
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6524,i,2869932364470514551,4626998300439284356,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6860 /prefetch:8
        7⤵
        
        PID:4324
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7384,i,11717503747344067339,12505955227282080466,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7448 /prefetch:8
        7⤵
        
        PID:4792
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7380,i,8616868844481442349,6493248402890127664,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7488 /prefetch:8
        7⤵
        
        PID:5364
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7360,i,2571114261869889742,2049641339578300413,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=7428 /prefetch:8
        7⤵
        
        PID:808
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7416,i,13957312638667069616,9458543974233186572,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7528 /prefetch:8
        7⤵
        
        PID:1136
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7404,i,16349253295631228067,14225177197506398657,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7508 /prefetch:8
        7⤵
        
        PID:2552
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7392,i,6603427710080174040,7787537612011384113,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7468 /prefetch:8
        7⤵
        
        PID:5592
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=8240,i,14284332074841911324,6285255502317510981,2097152 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=8256 /prefetch:1
        7⤵
        
        PID:204
        
        C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
        7⤵
        
        PID:5560
        
        C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
        
        C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.56 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x7ff6ea3638c0,0x7ff6ea3638cc,0x7ff6ea3638d8
        8⤵
        
        PID:1876
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8468,i,3689490591901887893,2165247851314407718,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8520 /prefetch:8
        7⤵
        
        PID:5540
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8452,i,4465030660843700722,6803395701853226484,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8500 /prefetch:8
        7⤵
        
        PID:5580
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8480,i,18402132578464148926,3741235579460338280,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8540 /prefetch:8
        7⤵
        
        PID:5588
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8492,i,8251770040922165900,12843772401449370437,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8560 /prefetch:8
        7⤵
        
        PID:5604
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8268,i,16089310963081039725,14317407975768813560,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8600 /prefetch:8
        7⤵
        
        PID:5632
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7356,i,14436271463259463697,3817670989827558826,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8580 /prefetch:8
        7⤵
        
        PID:680
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8300,i,18066391329243231100,5883030569404572459,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8592 /prefetch:8
        7⤵
        
        PID:2136
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8288,i,3231206419191882114,10717153545097496651,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8696 /prefetch:8
        7⤵
        
        PID:1972
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8608,i,7438700045211356877,13711811033461681677,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8736 /prefetch:8
        7⤵
        
        PID:5460
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8652,i,9977009300198370004,8254737359581720237,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8756 /prefetch:8
        7⤵
        
        PID:5440
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9832,i,4070145237240806339,7688671593729451537,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9856 /prefetch:8
        7⤵
        
        PID:6948
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=9820,i,8714081771356478250,182086442542423089,2097152 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9984 /prefetch:2
        7⤵
        
        PID:7084
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10124,i,13421759075848613824,13262209939285202222,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10132 /prefetch:8
        7⤵
        
        PID:7120
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10332,i,10723716687645823481,1545664653882289921,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10316 /prefetch:8
        7⤵
        
        PID:6412
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10348,i,14353033310295358017,5387323386964590235,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10008 /prefetch:8
        7⤵
        
        PID:6192
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=10648,i,6335495479237026429,13770027594938011130,2097152 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10628 /prefetch:1
        7⤵
        
        PID:5244
        
        C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\installer.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\installer.exe" --fix-taskbar-pins
        7⤵
        
        PID:2328
        
        C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\installer.exe
        
        C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.56 --initial-client-data=0x290,0x294,0x298,0x26c,0x29c,0x7ff751e9ad88,0x7ff751e9ad94,0x7ff751e9ada0
        8⤵
        
        PID:4656
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8284,i,6307475594482406384,7929812309304235901,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=8732 /prefetch:8
        7⤵
        
        PID:6156
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10848,i,14290505176378531448,10873974221092452962,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=10856 /prefetch:8
        7⤵
        
        PID:6200
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11000,i,4655385566471036583,2415059759837774324,524288 --field-trial-handle=2116,i,15286432420922581196,17746568037065875395,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,7018873190289106548,16212320670127768277,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11012 /prefetch:8
        7⤵
        
        PID:7092
  - - C:\Users\Admin\AppData\Local\Temp\.opera\88819235-ebed-44c0-a29d-2f7bfcc9297a Opera Installer Temp\opera_package_202608122229501\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
      "C:\Users\Admin\AppData\Local\Temp\.opera\88819235-ebed-44c0-a29d-2f7bfcc9297a Opera Installer Temp\opera_package_202608122229501\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"
      4⤵
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      PID:3228
  - - C:\Users\Admin\AppData\Local\Temp\.opera\88819235-ebed-44c0-a29d-2f7bfcc9297a Opera Installer Temp\opera_package_202608122229501\assistant\assistant_installer.exe
      "C:\Users\Admin\AppData\Local\Temp\.opera\88819235-ebed-44c0-a29d-2f7bfcc9297a Opera Installer Temp\opera_package_202608122229501\assistant\assistant_installer.exe" --version
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Enumerates system info in registry
      Suspicious use of WriteProcessMemory
      PID:1324
    - - C:\Users\Admin\AppData\Local\Temp\.opera\88819235-ebed-44c0-a29d-2f7bfcc9297a Opera Installer Temp\opera_package_202608122229501\assistant\assistant_installer.exe
        
        "C:\Users\Admin\AppData\Local\Temp\.opera\88819235-ebed-44c0-a29d-2f7bfcc9297a Opera Installer Temp\opera_package_202608122229501\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x954040,0x95404c,0x954058
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        
        PID:1812

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2788

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:5636
- C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\opera_crashreporter.exe
  C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.56 --initial-client-data=0x250,0x254,0x258,0x24c,0x25c,0x7ffbe5cbe310,0x7ffbe5cbe320,0x7ffbe5cbe330
  2⤵
  - Executes dropped EXE
  PID:5844

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
1⤵
PID:5108
- C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
  C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.56 --initial-client-data=0x224,0x228,0x22c,0x200,0x230,0x7ff6ea3638c0,0x7ff6ea3638cc,0x7ff6ea3638d8
  2⤵
  PID:1648

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

opera-one-dark.jpg

Path C:\Program Files\scoped_dir5340_229819859\opera-one-dark.jpg
Size 349KB
SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
MD5 fc3dafe25d5bc30a830ab92aefe52634
SHA1 2e1bda9bebb1539aadf6a2c6ca33c3b9ac8865fc
SHA512 d9ec9ad58ef765de7fb1cf737e9d287453005edbb5c47524e19938161c14b16b59084e9b91a2b40389c43fe9204fb9fd41698aee68968fb2fb046a4cbeb73829
SSDEEP 6144:SXn5tlDpMtckM8FeR5HrNVvuxQiW3qp6gIQ7B/7SoK2RIFW8aE6mM+z:QnfMtc/RBrr0QiWc6TQ7B/7SoK2REafC
TLSH
T1A0742397ED4262D66B26D0F13C52692FE3066AF31728454B322424F7B3A1C1AD1FBD78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

persona.ini

Path C:\Program Files\scoped_dir5340_229819859\persona.ini
Size 217B
SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
MD5 8fc4f4bf76a946d682606a6be94a822d
SHA1 3248c1d836e9eab63f0b647ed3249af2dc0e342f
SHA512 5301c9918ed28c51ffa1d06796f897d7d7df3954a339718647aff9d11c7c96fb27fe1cb0fc7438c5ae1e86cc9a7322fea7b41b646ae03a4d51f70aa4bef6f488
TLSH
T14CD0235211470321D103D7D920717ACD56B65168C604539C03EA7093F2472559592D50
MD5 SHA1 SHA512 TLSH

Submit Download

opera-one.jpg

Path C:\Program Files\scoped_dir5340_939874771\opera-one.jpg
Size 194KB
SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
MD5 c18898ca5a97bc5807f3be336fb1338c
SHA1 83fbeaa1c4a4b69599cc6eb08f8958a6908f6b32
SHA512 f7163299688c9fdaae8882c38e5992cd23d90f48a6d36a307e756794c6c0541afbebf12b584c2e03464008e2e4927e775e57e3f982e412206b7d9db271976a93
SSDEEP 6144:bcztf14vie9cI/+1YhN8iuRIHN2XT7/N7:bcpfmiscK+QReT7/N7
TLSH
T10014125012852B6BD4DE763021AF362DC703F5BEC63E94065180AC5BD9CBC931EE7BA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

persona.ini

Path C:\Program Files\scoped_dir5340_939874771\persona.ini
Size 207B
SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
MD5 a2294db65c800d2e518ec4943a2dd187
SHA1 02e293150a096b6342d1c39ab57b27d5c0c8cd7a
SHA512 115c2d5573795136eaf70cd9c89478d3b1c4dd95aa7189cfdf59319cbafc7f90a01e57c34050bfb24095bada13db3bae26515a1d4c2479f646ae52851dc41f53
TLSH
T19BD022A621820222D203C79C207173CE9AA692588A1442AC03EA70A3F21B2A9C297D60
MD5 SHA1 SHA512 TLSH

Submit Download

8B2B9A00839EED1DFDCCC3BFC2F5DF12

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
Size 1KB
SHA256 63b14543360f5e89942ea8d5113526e64fbc71c1207328f0136b3a495d921dd0
MD5 adac67e1d2da2d706db151c2db316b2d
SHA1 5f6e301d23e33132209707945d0e740d5bcb8996
SHA512 9371b62ac25c6ea8fb6fca19ac47b873ced9b3d0cb45ce4de5ea974b93c12684c65aa23c7d83331c77502853258a08dff73ce5e3fb6170bd3ab1c5b3283a86a9
TLSH
T1DE31AD4EA2153027D5427F72D8CEBE83CEB1364667CAD46B18046E4229AAFC25FC80C9
MD5 SHA1 SHA512 TLSH

Submit Download

B46811C17859FFB409CF0E904A4AA8F8

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
Size 528B
SHA256 d2bb091268ade68ad8121d2184d0fbce128070156304bd4de312e6fbd267409c
MD5 047f3e9d21d6b325d592b1959e4362e6
SHA1 5aeef5f985171cd69da397fd039854e44ebecdd2
SHA512 4523896ed4a03afafd2075d8c8947236d34fe1da2c246a3f90c2be2a5c151c18bc58a6cde5a209abb8e06e80f662e24d0149640b3e98e8a872bfa8a04ef592a4
TLSH
T147F0500990082252C855FF55DFD6AC97DC76336136E595036D458E410C12F96AF950F5
MD5 SHA1 SHA512 TLSH

Submit Download

E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
Size 471B
SHA256 f84f5b33979cdd57f8cba10cb7bcf79c07a5a8afaf5801aac8601092a02cce6e
MD5 ae42a9ecb0cb2908ccac9d9443725d43
SHA1 33853e30cf837b4b049f35ae6f8f6606c10b9f59
SHA512 83093b337bad91bfabffcfafe12b71ea75c7ba19538d78b3e715e70af6ad802f2ff92e94aaefe4d2d4c29f3e145f4d9488e7347fdf1f224c8243cd107876feb1
TLSH
T12CF0DCC24268A8103F8AC88C25F10C3F3C12B41A54EA51DFA12DA4F2961A5BEAB5C43A
MD5 SHA1 SHA512 TLSH

Submit Download

8B2B9A00839EED1DFDCCC3BFC2F5DF12

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
Size 174B
SHA256 caab2172193726856379ea2ae8fabcd9d0bfd87e3ae32d414a9a19f582cf4188
MD5 25b5c880ae1b93d81eb2dcbb2f5053aa
SHA1 d7b559ea0f2dcb4fda349c505db2da4e18b0a52d
SHA512 c2f7cef51dd959541f1baf57a86f5a80d4a03694aa17a7ce6d12f9cad18ecf644af7ad2600d3318e064aa503dd40c9c7fea5057b3154cc70f6bbd978936e1a3e
TLSH
T1EFC09B0437B54256F1344DBF1657532347FBE505CE41C3540F705259C51DB429CF5D06
MD5 SHA1 SHA512 TLSH

Submit Download

B46811C17859FFB409CF0E904A4AA8F8

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
Size 170B
SHA256 e8a5b40fd7287228bc7b36b60baedfbd8dc64bc044eb55e38a26eccbdedc1f65
MD5 358664eddf567e072c0aee49be05c9a3
SHA1 343056a4f892c8fd65c17b32ea653c2ec9d0861d
SHA512 c3c64fe9d77c378ed1cfd02df152f46b7dec6dd0de2653047bcab39843c16bf6b5d8f5b081c4e94a9ca7f235252eb26db3fd7391243eba7d3d20c1e527a92ec9
TLSH
T1FDC09B1473654715F10E517D79D65A1517B69105F5C6C3545B741134C9186500871D05
MD5 SHA1 SHA512 TLSH

Submit Download

E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
Size 416B
SHA256 45272eca4ecd476a925afd2709f2bb2730eaf5a51b820a0d0c97f1a9bf8fd06b
MD5 9f4c1bb4083f53c6a40e86493b9fbda6
SHA1 fecbb63e44b7679faf98cedf449a2c0b790c70be
SHA512 298ec70cd25101296fd1a7f0ce164371e6e19f13ca37e89f826351f2359237af18c43dd347adc310a754c8851319655816cf78d12aab818a82d5fa18de9ffaa4
TLSH
T1B1E0C02411F7106DF0F4E4788FE5FA314C46F026042C93F41BE457057602D40EE52A35
MD5 SHA1 SHA512 TLSH

Submit Download

134.0.5954.56.manifest

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\134.0.5954.56.manifest
Size 225B
SHA256 f1841e5ab59918b79032d1e1456aa5d030eb5d65853f4584d1105ce2080d78c2
MD5 6cce8f005d1829fe59246310820edc15
SHA1 caa79fcb4275705bdcc46776f065d67d2320b0ab
SHA512 6134e22c2c11379eef4d0baf30a7a3b9a5e05facd0e81fc1de375bcdb287f731158d4758bf94e25e907d9cbfe80a94d634e0e849d595415666c0bcaccb84a410
TLSH
T14AD0A901888A22096B6341A03CAAA8016118C76708CCA04870FCF867BFA3928A2928B0
MD5 SHA1 SHA512 TLSH

Submit Download

150x150Logo.scale-100.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\Assets\150x150Logo.scale-100.png
Size 1KB
SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
MD5 f4d70bc86e8544d7758742c2eba89d47
SHA1 5df4635794ab25e2f88bcf8ec39c19a09383a029
SHA512 d20cbd543bf97890d64c07f9e99188604f4dc5def904ad74229a3b1d9d9a06fff93af711c99a178799e9de472d930aa52a0c154f0d2953abe5ffc3cfd1708ab9
TLSH
T11811C840D668A4ECCCCD5DBAB2BC3893D7529C198049B1DB4CE1E8E38C303050976E0E
MD5 SHA1 SHA512 TLSH

Submit Download

150x150Logo.scale-100_contrast-white.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\Assets\150x150Logo.scale-100_contrast-white.png
Size 1KB
SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
MD5 7f69f89f11fd675b36e8de01de3c29ad
SHA1 b91e00e68889367de138ffa5e7fb3c9de2a18467
SHA512 06c162296c5ac62429e6e5dec07b836e6053cb4eb0291d8ed904f71cc42352c134870ed964517d2600f03fd7cf3821ee877ea83a330c9597fd7d629f9c2a6432
TLSH
T1081184F6422D2D1DF58532B16EE55FE299A82B2535D0BA425008C1194E2B512C900180
MD5 SHA1 SHA512 TLSH

Submit Download

150x150Logo.scale-140.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\Assets\150x150Logo.scale-140.png
Size 1KB
SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
MD5 a0076d9b3db9054267a7c86c9323aea1
SHA1 22b85aeec3e3804fe1f6e91d5a9ac1c6a0153b6c
SHA512 8fb750bddea61501f8ce2b0d0c27d29f322c9f297777f26b1401696c836c844369a9f6890bbb9827682deb70004cd98a973a0742d2d218f12a9fc3c301f10985
TLSH
T10121F84FCC2CE4E4CEDD49323C15A326A33021C950036F8A99CAD3F2876474C68B71D8
MD5 SHA1 SHA512 TLSH

Submit Download

150x150Logo.scale-140_contrast-white.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\Assets\150x150Logo.scale-140_contrast-white.png
Size 1KB
SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
MD5 f601df01a867a51514ea89ac9bfe9b86
SHA1 827cf9859b7b1864236cd1f03e8aa40758285e82
SHA512 2714e67298058e8fdad4459cfa17e2c7c67353bbfd9ea850bb403e669ae085ba579c31f7d64889470a97565719342e6a30efe2f66566783197194433aa947600
TLSH
T1DE21B45BA702048EC2065E3F4D54C81B6591FFAAA3B3DD4B265303B0A44217E18E76B4
MD5 SHA1 SHA512 TLSH

Submit Download

150x150Logo.scale-180.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\Assets\150x150Logo.scale-180.png
Size 1KB
SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
MD5 0a76f51f6169a31402ff7c61cfd05161
SHA1 843a32d6dc0d5b9d97c5f475f96e49852823a103
SHA512 7056949d7aa9cc4c96f9c13d656cfffa9f9a49ca78f6be3037cd38cc1d8712917cc235099f24723bba26fc9ffdba015480309d0418961c1116dbe7b65de6301f
TLSH
T14A31D8C629E310F9F9FC01F501126A6CD7C095D41162215B68CADDB42CB37257BB90A5
MD5 SHA1 SHA512 TLSH

Submit Download

150x150Logo.scale-180_contrast-white.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\Assets\150x150Logo.scale-180_contrast-white.png
Size 1KB
SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
MD5 67a0163cd9753e42360222a17173f593
SHA1 e4ee5c2288cbd5d354aad1905b917285a3daeb92
SHA512 87e69e15ba6dee402dbe5a90da864136ec2c6884c204a567ad461e0181e70514f73a7df22a47de63d4829fa937e56fc4c08cb6c5268313f7b9af1e7217d81f47
TLSH
T10F313C6F5D568577E37C42BCBA7085F5D325B31C400727106F34B2983814E5521A89CD
MD5 SHA1 SHA512 TLSH

Submit Download

150x150Logo.scale-80.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\Assets\150x150Logo.scale-80.png
Size 827B
SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
MD5 95a8f1834d8da00ad94c0cf2aa09853c
SHA1 7e830e3ef55b4d7b9a18ec8c151bebb2c28f0069
SHA512 c89be6e503c26efd4eec12c77e091570e187ff64928cab01f6f873d9ca3769f019a1724f76b57c9d4038495e29cc4106f919082913323af1ece7aff820c828f1
TLSH
T16C0120FB28489DD0CEE79271529CC55D9BC259065A80D0F7D2E9D8C05D33B49E678810
MD5 SHA1 SHA512 TLSH

Submit Download

150x150Logo.scale-80_contrast-white.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\Assets\150x150Logo.scale-80_contrast-white.png
Size 799B
SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
MD5 3015766c5ca769e54009f167550f7389
SHA1 0eff02455a1e0fa1724bb1d4333c3d24329f9e9a
SHA512 7ea7495163e0246f78f88dfd0ee72b8584108c286227d70cec9de125747f21f2618f46f7197f7cb9c0f40d297bcc3582cf70f54ebf7f9eb10941fbaa6bf0149b
TLSH
T17B010AC8D032EEA5D91788F36CA24FD59CEF42F000181B2C84A880913C030D6B03ECA5
MD5 SHA1 SHA512 TLSH

Submit Download

70x70Logo.scale-100.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\Assets\70x70Logo.scale-100.png
Size 781B
SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
MD5 ef710f4543a25076078fbc1c09ec9e2c
SHA1 e4ea1c2cb24cfff03569dab28877d11f9c6cfc74
SHA512 fc979d06806a69da71336533d96b1cb66b227064a224e23c6f5bf9d1fe4e85a9d9546643ce296ba5f04c025284d5ca2c445c52695aae669735a2a5b48ce07a00
TLSH
T122016002E621E8FADFDE023E322C446D4725035AA706BA1F00C6F8A72EF0B4820B7049
MD5 SHA1 SHA512 TLSH

Submit Download

70x70Logo.scale-100_contrast-white.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\Assets\70x70Logo.scale-100_contrast-white.png
Size 752B
SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
MD5 ae8eecb8db4d20efbd816b887ef75840
SHA1 1d0cc741d0a75e5e8ab51dd8b6a99f5e679ef5db
SHA512 0cb71eb86ab2c5d4c70f04d7b10736aa453d51b56723ed7c9dc332f92ea428eb7861f23da2e30416bea8cc59877ba2c87f3032ea473028a7df8c6a299d517572
TLSH
T13501B5E19CA5D03C9D59ACB03820317AFFBF65062CA02F825474762B2010CB538E50CF
MD5 SHA1 SHA512 TLSH

Submit Download

70x70Logo.scale-140.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\Assets\70x70Logo.scale-140.png
Size 991B
SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
MD5 9590b4bd9378a2d8706dcbdc630fae8a
SHA1 751eb2aa5ce4e83133a73fdb9efffc013bf37ec8
SHA512 b2666efa916584c9b090e305eda116f2a90c58862fa36a0963176b09b493a4ce5e601a178c74be0f2e59811ad42cd1d5747e8a45ea07c3f5d52b28e177fa5603
TLSH
T13C118820BE023DEDEAD89D14E139505E86042902332860CBA0E5D4908EBE79044F095D
MD5 SHA1 SHA512 TLSH

Submit Download

70x70Logo.scale-140_contrast-white.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\Assets\70x70Logo.scale-140_contrast-white.png
Size 865B
SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
MD5 9b103e9dfc26dd4d837df8ab55ec4fb8
SHA1 6f46830a3a63e0eec923bccfad57d8391ac3e559
SHA512 e8023067638a9fb849ac9364a45c8be9a6dd325fbc704d960cf270ce1075ac6c9d57b7f96cae62985e92e5543dc2f2a43d473a2dcb0060af067cd474aab7e59a
TLSH
T103118AFB1644C6ED594F572F50DA9C51734B8A3B836E80189A3C869CD190F44CB77ED1
MD5 SHA1 SHA512 TLSH

Submit Download

70x70Logo.scale-180.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\Assets\70x70Logo.scale-180.png
Size 1KB
SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
MD5 7ab03a8ba1c0243b96c4124cd5341073
SHA1 7de490dd37ebed58337fc0db654f12398e84a78a
SHA512 c96846f008e8ab440009bf2442a2cb9db3d24452619c8c2b669395f971f9a316ec62693bb586a94e565f1cab893bf665112c34cc1fa46319e571e3fb4d2fc41d
TLSH
T18021E7612B26DDFBD7C182F1913B4A395E1CD582327461369CC2E1623C3772E1271248
MD5 SHA1 SHA512 TLSH

Submit Download

70x70Logo.scale-180_contrast-white.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\Assets\70x70Logo.scale-180_contrast-white.png
Size 1KB
SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
MD5 1521be4b8c8f2e0ce20a89f163de3909
SHA1 c291448b74fc3d7060c1df4b35026084981ee441
SHA512 6a0781d275dbf8fad4ee464e759de74399918abdc99cef3c74e5d66a0d555a8bed363da964c15e2ad9ab3cde5a17d537bbcbadb10585aa1ef50f0b614fc39a50
TLSH
T1E011BB5771622D70C791577F5868F505DC72D33134A18DCB5CDF29ABD0C62B4449C242
MD5 SHA1 SHA512 TLSH

Submit Download

70x70Logo.scale-80.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\Assets\70x70Logo.scale-80.png
Size 590B
SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
MD5 1b4ff26a106929e3a5710900a9d984e7
SHA1 d3e1bb4fa64083743ab56ecd89d586df6b583bce
SHA512 d8537fa3b0da1b2ee7c8cfbe9101a7dca624af4532305e06f211e4dac799ae9b533f19d3cdf052352e2a926bfe32cc908cd3944b2543010e7baefe52697add92
TLSH
T11EF0E16019445CD54FED19969A3D4F30EE5034155813BCA70DC2D8369E2634598B260D
MD5 SHA1 SHA512 TLSH

Submit Download

70x70Logo.scale-80_contrast-white.png

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\Assets\70x70Logo.scale-80_contrast-white.png
Size 519B
SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
MD5 169dc90309162bbabf07ac3d954a076f
SHA1 a4c87f029a4f34d66847271cdf8c5e73b1e48a90
SHA512 b7633c8faa5614efb402c47957577dbacca1a1b3fd0bb39cf79eb3a06ec6a55f9b8c5ee9569271efbfd7d43ad348d275c0c6c9faf840663268bca2fbc6c64bb7
TLSH
T1D9F075C360D1ED222EBA2004E411ECFC747A11985B439885003B48BF7F77F20A90B088
MD5 SHA1 SHA512 TLSH

Submit Download

assistant_package

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\assistant_package
Size 3.6MB
SHA256 edde79cc199536d4bb4a61c435f86e6d3c6c93663b4a3db2cf3f59c93e510173
MD5 a60d71f7a2f9100d9f649576b93fc00e
SHA1 f1318346188813ac7d52d11a5ab6a3daa647665e
SHA512 b7f2a387c9d5637ea0636e1f4f1bb1fd16e751f7919e473051e19e08d802f0feb11fedbd315d621ce51800e70616a9ca1ac79b22410e69e3d353f1f2208f7acc
SSDEEP 98304:ZkioX4lqW6yVelb4l3A6r590P39mGARehf+u/F:ZhlD6ZW3b61AeF1/F
TLSH
T1AC063332F6C4C432DA5727334CD4B6E8A57CB2623B564BAB37880B4F9FB01925612797
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\d3dcompiler_47.dll
Size 4.5MB
SHA256 7d356c9f90dcf43151cb37ab361da40309c80cc5b20c397375b09e95d0fbeb95
MD5 525068e11f294a0fd8a48baccabd1c19
SHA1 989fd343f0b5efe6a2ca9d09de3ead47657bff88
SHA512 72f5512d5ca8c60cc0ec078bc29b11612da9fe14c65ae7e8a79ea5293b38594273a887a4e7b3c4a073e0d861d1d39d65f0038ba2fad8d25136f374c03dd9f142
SSDEEP 49152:86ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/n:8Udeqt737jFm5wP
TLSH
T191268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxcompiler.dll

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\dxcompiler.dll
Size 24.5MB
SHA256 09ea4b127b9a1b3033dc5ce936cefe80984c83fb3ce3abd5386934f324ca471c
MD5 67cfc2d8ad3054d6135ab3cf97436d4d
SHA1 0138fada43c01c4adae5258b3727171e2e603c29
SHA512 084132ca60f1ab44c2f5494b495ce7ceb3ba61419ce58aea89821f479881a7f1561d9b5cf30b45eec435413698b88a311a3ac38f973ca8a6574b8165de253529
SSDEEP 196608:Ea92SjdOKOEoV1TaUqcjdg6WRRiNrP/7m6Ilg8DDVrhQ/a/:PMSjgKOEnU/jdgfRRiNz7bIg8vlhQ/a/
TLSH
T1104739122646D49DC059C879C7678B26CA6C30E73FA7B9EFC0F451252B79EAC1B39234
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxil.dll

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\dxil.dll
Size 1.5MB
SHA256 fcc9b89660d63032ee93e7afca98d7b9d081e1b09edb8cf930335a0e2f31bbd2
MD5 4a25fbc698c63aa45be88d48fbee60cb
SHA1 13726ed13487553036cffbacdadb16241d0d1176
SHA512 708c187aaae16eb35b33ff971fa020735072fe822c7014a4b524193b9724aaaf20699ba0381951ea5c54751185eeb50c247be71697b4638c9067d2e6b3199257
SSDEEP 24576:PcuJxAR7BBPp6UMPzbOXh9/duHdFnXIqpfya8PNCdbyKE5vl5eZiE1/0Wy4r8H/z:PsHMPzbOxBduHdSCde8ZF1/0Wy4oV6bK
TLSH
T1A9657D6B66A800B9D4BFD174CA438E1BE7B2B45503B0EB8F16F402A61F577B15A3E311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

files_list

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\files_list
Size 6KB
SHA256 bbe5c7131308bf1cb8530b3c7a5489e7c1fa02c5041be66f9fac621ac6bcad04
MD5 c06bd66d6b8c83142cb2e2f798de4e71
SHA1 10a373d478319b722e742b92af22d4beee47ce1d
SHA512 3bcc5df6b94fdbd6b70387fae9ccea1efd30eafaf2057499642a1632e8635f2c089a9d1186d9445f429a19b8faf973e359d40f817903184c22b3a69f13d8ae15
SSDEEP 96:OMyTfz5XZyITJhGwbx7Vt/JnZ7vMbngEDi1JZJiRORnOU:fafz5XMRwbxHBZ7unmvgORnOU
TLSH
T18ED10697895F0265CAFD93F1EE61E89091342495EEB83058F7C70A5694A33FE02C9ED8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

headless_command_resources.pak

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\headless_command_resources.pak
Size 2KB
SHA256 8c0af48079123a1ed6f03f0d830527b21cd224c2fc7575ec485c486da41b16c9
MD5 9c33095519168e92728c86a591a17862
SHA1 beec5c5d149d46234897395f72f95788a568537c
SHA512 f4323121659cdbbd1ac0872cde925dc6143ec2a3221c8ccbb2273e0916f1341beede54121e077b363e2995a656d46192758b65880b8dbf92cbac381a4431cde8
TLSH
T146511893360AB6A6C079C72C91DA9A7C6BE58325748DB5744EB70C33E9384A345C2871
MD5 SHA1 SHA512 TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\icudtl.dat
Size 10.4MB
SHA256 d0a05dcc74a5b6ce1657a2ae44a58c0df03a1a07c24a4df2e3381353911382fc
MD5 f50c621247b8ddd574dc9790830f28c4
SHA1 ea84f3a773b5b90851753353826fcdf94576b3c1
SHA512 030df4e2c8f0354a97ac6a21774d6bab1246237bb71cc286b1a310b1a7602dc31fa056b8beb1157ac71b13d3744cba0fa71ac807e5f69fcafebb3cd827b553df
SSDEEP 98304:nHcBQYOo+ddly1/rQqQC1HiXUxO/RJk3IWhlYntjndL+j89o:nHcBhORok2HiXUxO/RJk3IWhlYntjd/o
TLSH
T1F8B62803A2FB4EC2F9FB9FB098F552779567BD49AE32805951042F3B1C333908665B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

installer.exe

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\installer.exe
Size 8.3MB
SHA256 ba2091e72ba4d42619a6f8cec3aab9764915f117cb16c6c70bf162ef636d95e5
MD5 234856a8d2ea36c4f6c03bcc4bba5393
SHA1 4314faa87e29e748e0c99fc726a56bb09d4fcae9
SHA512 9bc3640d15f36b0baee51291ea72bb5d2b11c35ceb79fb8cfddf0869ee0d475250cc953ae0f413bf693bab73cd7d516f156db2e25b282d9e1a0eaf155196d46f
SSDEEP 98304:kfyPB3Qm1BgiwINXE9ynI81WT7cG8BAzFYNY8AFP:2yPB3Qm1BgDueXFP
TLSH
T169967C53F2A601E8D06FCA748B7A523299757C464B31A3EF0A943A251E75FD46F3CB20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

installer_helper_64.exe

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\installer_helper_64.exe
Size 593KB
SHA256 a731b1035fd27ebe033e3208a3152b1fd85e9994a9560f14759311dc62dace19
MD5 9d062dc74bc0140aa65461bc6e60cead
SHA1 e39b1e9f9ec0d982baeef13597fdf4076aa5df46
SHA512 a5823e556da9538e103237b99d35817c9f4f1980579f48352fb191b21db500891beacc4551963d5679071d5189fbd7dc9f0ba020777a2004875adc4e87d5433f
SSDEEP 6144:JeE7No2ag6bt38gpEA+BacGpxIMnkgSkQ2CCzr7OWbmo1AZb0hHKkMqqvv5x:CHVpEUcGIMno2CCzr7OW6aABT5Bx
TLSH
T1D0D48E55B2D547ECD07AC1348A528652EAB17C560F25BAEF02A0727A1F77AE41F3F320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\libEGL.dll
Size 492KB
SHA256 007f73feff0dbe26a4efcef8bc91cd8bd31263cb474e07d3626a35ba1dcbd047
MD5 3274f0581f4d85e5e263ffe7f81dbe64
SHA1 7eec7fb5c4aeb00fbdd798b17e63b50ec6f24c7a
SHA512 649af8e7162bb6bbd15c635499e64b03c0bc5685fa21a889e7c945be96967a8adc22e15b6a370b020b61d1c902ce8a79591ffdc80225fd1a48246e9defa64d37
SSDEEP 6144:yaNob/iq0y3iwT1PdwGpyms8ybM/0Ic0Vr0BYc7kuxkHV1:Nq0+T1hUnbM/0Ic0N0BxkuUV1
TLSH
T1FCB48D15B2D949ACD07BC1388A538547EB71B8560F61F6EF02A0E2792F77BE05A7E310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\libGLESv2.dll
Size 7.5MB
SHA256 6240ff7aaea0749a4876182292ca5891327bcb9cf401c1d081d7e9ed561bcb0a
MD5 3b42250d71e78f397e87de58179fd287
SHA1 897eb7c1d2b1b2f19c5409c3ea1921a50d16bc5d
SHA512 aec0a5d8a58167bc25ce9f2eaa73f5a935ce61ea9e847e92de605263c9eeefafd1bbb73ff9d9442963ad51ffa7151a92622d158cf1f74e0751f95bbd17bd40cf
SSDEEP 49152:cWk6qWVetTMgVQZbTob8R1QOmu9KaMtbaFsjufXe4lpxkYaVr/qCwPuMnGZM0g9Z:iWUdw+vVryV7GZaOX8Te/rQs7Po
TLSH
T187868D13F2A240DDC01DD2B89757A227F674B8450724B2CF2B9857162F7AFE0AB7A714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg.pak

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\localization\bg.pak
Size 998KB
SHA256 310b7012246dad3506b5fca496e8f14c9e2fe750455e08aee9c104c62e3dca4b
MD5 95d0a3571403c3d1e054ac3c40b63078
SHA1 2978511ea2c5fa65833d50e96dba72b3dbbae973
SHA512 3620937aa44a6ff02e28f105da2b1b6eec9515843cdd570123e8ee66661922ea1c835a81eda5dc6d8f6b76cc895e97b571bbc6fe5f48b6b5b2dd069d62047401
SSDEEP 24576:KxCxeE4b3JwoGvqG4l9cI6dBBuK026g2HQ2WrZpvYAgCzQkEC3UnVb6fSIAFWVIu:KxNbIqRydBBuK0tQ2WrZpvYAmUUnVb6l
TLSH
T1B32535A15B9A649F0101F45F98087E093CEB84FE3FE7879241652DBD39F10B887BA64D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bn.pak

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\localization\bn.pak
Size 1.2MB
SHA256 9ba4eab50c627aab5ea5547651b2c01b71b71baa3de6e5d54fcd1d0cdfb26474
MD5 7ac9b913d3fad11fb3436c410cab2fb4
SHA1 03361c26a007bdc589732d2eebc44419372e9d4f
SHA512 a5d979a4bb0f3cd6ff17bf04eee27b155186d90bff7e0b51e3ec5036ee6e5f1f2506e51fc79a36fd15198828c9f63cfe6e1f2d45f73cb5df95c6f99441c0c492
SSDEEP 3072:3H6YNFxz08tpmUnQ4Z8MqZIHZFQwQskOTGQjwI1U63x+TUZOQUPDi:3H6Ynxz0WoUQ4Z8MqZwYwL5jw+x+K
TLSH
T1AA55FF209C6E81B2A8D5CDC9434C6330C123AE979B65F74DDC17A25938ADC3C8DADDB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca.pak

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\localization\ca.pak
Size 628KB
SHA256 23198bd37cc02530154bc83f42f6b025e27f377390c4065a9efd1c4f178fc16f
MD5 9056d1386e063d5149feaef9a1f6a9e9
SHA1 8e2f33accece81b9d4883b17230a2e5a70ee2270
SHA512 f4fbcbee43b74ea97005fb8c52da6b5de651eb0ebd488314a4c646bdad14409c26da362dfd35d3c88f5904daeba40b242efb9ea3484b941b7b087e1e5b542a2c
SSDEEP 12288:JFKUO7S6ybGbf1bCCrz+W58rP8lpfmbVi6Z6M6AqHl9kdkcBKMe3aR4Uz1oO5h51:JM5/vY9VyLgQ6iBZnt+ja2d
TLSH
T183D4F7238BC83B760493330AFB42C257F09CA9847B16D254F5EE1A5622CCBDCD677A95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cs.pak

Path C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.56\localization\cs.pak
Size 627KB
SHA256 02f0f44077a7eee52e7e86839778bbf1cb899a4fb2fc9a7fe7e751ca0fb07943
MD5 e4001c598f951b2d77f48396d24a1800
SHA1 6ead9b102dce7ebf552d940732886697cd4a7fd5
SHA512 38751f9a9bb3c73b3ba579148c300af868d1afd8b08f457a72227820ef7eaa04c778e6df7e2d281a583a2810a6ef29105d7d91d05ca9595c9582c67548504fb1
SSDEEP 6144:EXDbFeFBgcihKMmozHJ62GOgISBaq8QtsVVpCvJfYu3qjWMqYhDaVV:EHwaxMKzHJ62GOgISMgvV
TLSH
T10AD46C1FEB936439584002447BBA5228BD5E83140B6EA9AB7CCF9C91227177ECFF1D58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

installer_prefs.json.backup

Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json.backup
Size 1KB
SHA256 33b9d707f0dacbd6b6ad30d4f9075303c50174fe4b659ac9299295e8486662ed
MD5 60077a09c1ed781032717639d7089408
SHA1 c7332bd5deb5ae921b826a7a90c462c4853aa32e
SHA512 71529f651df662dda299d41489f70d0587228fd3b16220b86c1e8c7cda520967300bdf9fcd8c3680f592ef7174ea0701532d8c7bf49c0b0ac0d587631e51036a
TLSH
T1AF31C860811750777F21835FDAA33F9D66071503E02C24E077DF0A1964EBDD61B6690B
MD5 SHA1 SHA512 TLSH

Submit Download

opera.exe

Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
Size 2.9MB
SHA256 9daed242d781c67cb53d81d0ba1a9d271695909769711df3310f017fb47bcb67
MD5 0c0da642e2197fcc00c5efcd8c884e78
SHA1 fc72b28ab7566327634a47f824d876b6192a8818
SHA512 2edc033624588a6de41a458cb8acebbdc4a46e6089e1ee592dd443df33ad7f5ab48d5bdeae99925d0da909ce2e322ca0124995abc6c0b9f4ef61f95d2e766c9c
SSDEEP 49152:ExU5bzGcVQGdRFAQQXTME16Z9qzmMRp47bvWQVwODCYHHrf/YrTmtr:EKpzGE9dwzNzX8GsE+p
TLSH
T10AE57C63F2D911D8D019C078875A9233FA61BC554B35A6DF0A90B7662F7BEE06B3D320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Opera Browser.lnk

Path C:\Users\Admin\AppData\Local\Temp\.opera\88819235-ebed-44c0-a29d-2f7bfcc9297a Opera Installer Temp\opera_package_202608122229501\Opera Browser.lnk
Size 1KB
SHA256 6448b333d840655fd1f3fb0582c27e3ae9aa292ef9891f2288473b65739dab1f
MD5 2355376fe1a59f1727c7dee566e3cc87
SHA1 ed8b6c43acf68e6bcd03307f072a15353139e7c0
SHA512 71d4ed277d0e0aa1f1aaf4dc822473035bbbda4e22a5856efce5edbb4c4dbb40d9c4dbc3083f857f643b0c7471209d6b01512cae81ba8f25275ca068951e35d6
TLSH
T1452151066BC93B30E2BBC57544FE3B2A9179BC15EF014B0E008483865DB2242589CF5F
MD5 SHA1 SHA512 TLSH

Submit Download

Assistant_130.0.5847.41_Setup.exe_sfx.exe

Path C:\Users\Admin\AppData\Local\Temp\.opera\88819235-ebed-44c0-a29d-2f7bfcc9297a Opera Installer Temp\opera_package_202608122229501\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
Size 2.8MB
SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
MD5 3b028b1188ac321e66add16f8ebadbec
SHA1 086bcb2b1c0d300be15c1390841aadadcec4eac7
SHA512 17c390e0df8e29ff9ad43e581db298ada2d8378fbb890dc5f4b17df8fbe21134f99ab203ea4752a419215d289c128a1d8bc14721bde80042e5bb4c3901dffb72
SSDEEP 49152:+kinoIZOrzV7AlDfo7eT/uAtH00raHx774jx4aGhcr0glyGIGE1HVyVNW272DS/Z:+kiocQzV89Tmeradk2ha0gdIT11yVQ2w
TLSH
T167D5233275A48C34D62312321CE0FAEDA5BE72701E6347DB73A42B1F9EB01979A1D562
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

assistant_installer.exe

Path C:\Users\Admin\AppData\Local\Temp\.opera\88819235-ebed-44c0-a29d-2f7bfcc9297a Opera Installer Temp\opera_package_202608122229501\assistant\assistant_installer.exe
Size 2.4MB
SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
MD5 b0408fa2a406f483e42c3ac102d35e9b
SHA1 fbaca900ad54abc65ec2cb34d63727c87132d16b
SHA512 2e8b9af626fff68ecd0204d6a3151b4518749143ec78a2f8f99f959399d1c8ea59987f99c38c9e48fe38b518fd8c91381356daf3f17944fa3432337b882e5401
SSDEEP 49152:wJv8lBbu91xwyiZSwRDzWEibQojjHLQDpizF:wR8lBbu91xwyiZSwRWEKQWjHLOpc
TLSH
T10AC5AE12A86094B5D8563132321DEB3E9A30BE1657354DDBDB90BCC1BBB86E2353734B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dbgcore.dll

Path C:\Users\Admin\AppData\Local\Temp\.opera\88819235-ebed-44c0-a29d-2f7bfcc9297a Opera Installer Temp\opera_package_202608122229501\assistant\dbgcore.dll
Size 222KB
SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
MD5 b26ebc5cde9b1726ee9f9534dd6107d0
SHA1 de00af3ec4de63a158bcd50c6e95b046669d3353
SHA512 2e01c65b58369c1f5f4081cf377c3fedd87ae5fca63cfbc44dd7859a1e10a849d1bbdbb592349d793166f577dbd954cd8660f625dcbc9adc4d936d6a44f062bf
SSDEEP 6144:FASh0NdOEQzFh0ekr6nzwBaQGdppLIg2dFl96Fl:4MHZn1n+P96Fl
TLSH
T14C247C2269401533DCEF12F062AF363A96AEDD90239490C359A05BDDD6D4BC12E3D6EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dbghelp.dll

Path C:\Users\Admin\AppData\Local\Temp\.opera\88819235-ebed-44c0-a29d-2f7bfcc9297a Opera Installer Temp\opera_package_202608122229501\assistant\dbghelp.dll
Size 1.8MB
SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
MD5 021b11c0fc1a09e49a2046ef07d1747a
SHA1 4b955c1e7150db4f07528929fc529fde9738a2b3
SHA512 6ca94fdf2b92928859152aa23f31df46944eeeac7988f6bb5d647341843d8d2aa91c2c810d17c8b58a03c99e4ca7d7e1ae6b6c2d9ea5029616d870b89794d6c8
SSDEEP 49152:xEDlXSohR86M5NKBlv/2yOFVnzM9F0KM7:uFhR86MHyl0fb
TLSH
T128856B20E784813CE4EA1177E67C7A7D85ADE524073440CBAAC45BA978297D32F387DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

installer_prefs_include.json

Path C:\Users\Admin\AppData\Local\Temp\.opera\88819235-ebed-44c0-a29d-2f7bfcc9297a Opera Installer Temp\opera_package_202608122229501\installer_prefs_include.json
Size 1KB
SHA256 b178b6d0b515c07b5142807496d896b851b64e08851240603241bbd27e93c443
MD5 90a32e129392584de08828c9f8157bfb
SHA1 639aeb02eb87582dd6967497a0eecf0b6961f20c
SHA512 4f0b5c642225b431d32a00581f66c67ae75046e5f2906957d63327b84f5838bf54de4ddaa146b72fd939673d730fcd8f2910f9af5d3234cbc6af7e9a9be105ca
TLSH
T12711B9A45106B0A37772C25BD9B72BCA95470703986424D572CB042D94FFDA10EE5929
MD5 SHA1 SHA512 TLSH

Submit Download

installer_prefs_include.json

Path C:\Users\Admin\AppData\Local\Temp\.opera\88819235-ebed-44c0-a29d-2f7bfcc9297a Opera Installer Temp\opera_package_202608122229501\installer_prefs_include.json
Size 239B
SHA256 ad0a70852936dbf15eeb5accadd7acc1554959df5b85898911e4281e402e287a
MD5 d89bea9bbcd4817b77b7b90014f1da87
SHA1 21cdef3b05e461f645e198bb92f7c787ad0372dc
SHA512 70f794b897b35a6d15559a05cd358e98d2887096c60f7cac5c2e1d065e1a2c39618d64cc81b9fc2c3380075705441c3856b0df03eb6feb4396e8558ab2b1cc96
TLSH
T1D6D05E59802AC0E269B00287783633DDC24B1B0288616899B3C72125806DAA226EAE1A
MD5 SHA1 SHA512 TLSH

Submit Download

installer_prefs_include.json.backup

Path C:\Users\Admin\AppData\Local\Temp\.opera\88819235-ebed-44c0-a29d-2f7bfcc9297a Opera Installer Temp\opera_package_202608122229501\installer_prefs_include.json.backup
Size 224B
SHA256 f799101396e58ec98238b81669c288b0649788476fdc997cd029cfd5239c8aad
MD5 a31327ed38a2e2aa048700169e5c9e89
SHA1 cee83a9db48bf9c0d963bc6d03cc125af5cc4ffe
SHA512 b302790a45f5cefca7131f81d2d15976d402a48147960dedb5eaea136205c7a5e04635521f08c63f7ab53f1b9dd283e575240076beca5f392f47f0522f105fef
TLSH
T195D0A755802BC0E365B00283783633DDC20B1B038C716899B3C71125C07DAB326E6E1A
MD5 SHA1 SHA512 TLSH

Submit Download

installer.exe

Path C:\Users\Admin\AppData\Local\Temp\7zS809F37E8\installer.exe
Size 8.3MB
SHA256 3e1ee4a6d766e4e155d4818034c8e55efcfa743368a4e96a3b966badd7e09e14
MD5 36152668ab7d4db9a0015916f2eebfd4
SHA1 7f551a41bb0c09ef1dbf56b76bcd68682c059435
SHA512 0d1ba9f9533c23f5b089ea5b2bf21ef74e310b64e04ce39742ca7a0a32cf8937ad4bd579cfa56668ef232e3ea569fc0a293ced570d7d85311018c0ced893f1d2
SSDEEP 98304:WfyPB3Qm1BgiwINXE9ynI81WT7cG8BAzFYNY8AF9:0yPB3Qm1BgDueXF9
TLSH
T114967C53F2A601E8D06FCA748B7A523299757C464B31A3EF0A943A251E75FD46F3CB20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OpInst.exe

Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
Size 3.1MB
SHA256 ca9d4d11abfde239737bece34ddf7518c7d8bc59ecdb9884caa504d8e85db273
MD5 1e3ffdf29eeb5874f42b0c22d407ec81
SHA1 3b685b3d9f919f2f39aa20d8937f41b614ed93b2
SHA512 f0543d8089a795f69c91cda25162af9479b0f6f9401731b7eafa71b0edb953b469be87ddfb2b9b4a2c2f984ca62b24f2bbba041e334f43238f96b84821c1aefd
SSDEEP 98304:zA3624H6UA7suEqszIwzNfnKXevaMGP/OUYXW:w6FaUMdcmtlqW
TLSH
T1C2E523127B80D8B9E62210335F15E659977DB9201F26DA8BB3D41D5F8FB0282B636F43
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg.png

Path C:\Users\Admin\AppData\Local\Temp\bg.png
Size 224KB
SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
MD5 21eb6b8232802f32b6483eedb96677bb
SHA1 b390f01600e521586e210936a4b57a6b89e66a7b
SHA512 5cfcb0278e5e7473dde396ee34115a3f50a9ad195d99b53cc5cc33a169a42c8f729806491fc0fb607719139081fa3c774c37b1638de1289b73c0c4c80768cfcd
SSDEEP 3072:7MuA+f6FJxlUhyLg2cugpbM5Q+jBre6cAJqmm6nkrw8sGaDy7y8bRzUnKdh8BfM9:7MuAWojcVdGSf+4BML49RzUnKUuLZ
TLSH
T1E92423876BC391F4590BD65FE9386BEC3CD4E7EC82AB113C931A42424D8416B85DE8F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favicon_opera_one.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir208_130136045\CRX_INSTALL\favicon_opera_one.png
Size 2KB
SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
MD5 cd78c5defe6084243478de9874682e1f
SHA1 708c8c0649039ce9b3f8894d00b712d65d488ca2
SHA512 96744c72f623462f1c64c2e49e7a2387846ed65a78d94841adb3bb5b52f27d28f657ca3f2910b6b1b338a032a9b0e0ac47d23e7b25295d6841480b32268f4db2
TLSH
T163414D878974A4D5FA41D0215A037D9EF9BACDEF40970E5010D9043A427AF5573AB33F
MD5 SHA1 SHA512 TLSH

Submit Download

de932af914ba00303d4a2778a383ac9c831101e2.crx

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir208_130136045\de932af914ba00303d4a2778a383ac9c831101e2.crx
Size 4.4MB
SHA256 d364db16e995bf1205e67dfbc468d6f5ba57114821d2ce76fbcd8570744eaf7d
MD5 9ead028da57964c3f2fb86d88b0018a4
SHA1 aab5530c71b7b100e7d555be62c7b447b6faa0c7
SHA512 9756a2f0da8a789ca8f227d60c359cd8c5bed850384c7888fe27214d052fadfe5646b6fae87f4044fd3b35227b341288607356695e57e8fb6e65b9b7743e39db
SSDEEP 98304:Ih02mfFUL4lyXjcZvbVlGP026+OldabSiUlQcYwe3mpNY5K/KU0Kn+5367:Gs9oTEpQP0gOldoSRlQR0pNY+K9Kn+A7
TLSH
T167263370FB8EB141D937E771F4295BAB49A85810294FF87FA416634479C3ED08E0E4AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5756_243563727\CRX_INSTALL\_locales\en\messages.json
Size 401B
SHA256 9ad8ffac49958d5bf771eb6f0bd7462b32597696c9d0a45ade771ef8c124b1bb
MD5 f58e359a5a09514e503a7de060e5719c
SHA1 469e51c68e204d8268eede68ef1cbfe1e6732f97
SHA512 5498cbb61a7953f5780fff2ebeec08e48daae206e5c237686b41f771370874bdfa52243db1050b67f052d7ea400e385f73cc4c41185194f006c73f2e6f174b7c
TLSH
T1C8E09208D940AE6B52F792123C787A15F72E476B0500541A7DBC500D0FB1AAAD662B58
MD5 SHA1 SHA512 TLSH

Submit Download

additional_file2.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5756_243563727\additional_file2.tmp
Size 937KB
SHA256 73355e09adb2bbb96a8e146e1098ad18036d58353d87f78cf4e6183c1f8fa8a6
MD5 97e7912e523ee8b336116e9467f53343
SHA1 713cf92f71c302a3dcc0c681c2ea34c9f6084bae
SHA512 922061ff99803e56027fbbc8406d0ca83a29b51f86554ca21800933d2082ebb33cc477e15210283b171c19243255a40e5bdb9bbbaa481ad081eafd5d758bccff
SSDEEP 24576:AjEDWBvvZmpgffEXN5ECpw73j5eR465ZXS2Tf57HTSIDx8G:oEDWJZq7EA4j5W5XS2Thb+IDaG
TLSH
T1E51523A01FF2C02EC42207387510B51B8A18E995D50FB8CFB69A9325057AD8D5E6CFFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
Size 40B
SHA256 045694a966c713fb7a876bd0fb193a395f6eb916a4f4778200134343996c8cea
MD5 324af07dcdc61a215e872da396b11eea
SHA1 a083b1da2b065d4c18cae1b1bcb9887ac6a22c4d
SHA512 80a1847b5f131564c9da50014d1764bd9cb6c35cdd83a0c8e635245563ddf498ce4c892c854f01c5f322ba52566030a5bd99e2d6fc031d14c8922995bbb92204
MD5 SHA1 SHA512

Submit Download

13d12dc6-0a5b-4b71-862b-ca25abe6ac4f.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\13d12dc6-0a5b-4b71-862b-ca25abe6ac4f.tmp
Size 203B
SHA256 2f4819ca4edf3c7006f9f1fda03036279bf7dc5ad7b25f28f7b3ee9f2a17ddcc
MD5 71c9f1ea172435dc6a327a0dff824c73
SHA1 3d999f39ba8c6e048bd3665af6c65bae660265cf
SHA512 1ac861ca3b7b5b467288260c89c24b0dd8d8b23c109564197f430c1f16003777004a391d6c86b6b12e7f5675fe16418ac32a40a905954aabb5633b9b6ec576e7
TLSH
T1F5D0226068039B7899E8A432D3307F53282D4C31044CA838D1BC096A013C6D0030CA36
MD5 SHA1 SHA512 TLSH

Submit Download

259bddc2-7c53-4b81-bc90-4b729e417ff0.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\259bddc2-7c53-4b81-bc90-4b729e417ff0.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

35c3a5f0-c749-499f-8c8c-214f1aa49333.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\35c3a5f0-c749-499f-8c8c-214f1aa49333.tmp
Size 203B
SHA256 a54929d9437212df5af199f7a23e8d5a98770f433a524c8e161593afbf0517f2
MD5 aaf4b71c8133145af55edc191d1c16ac
SHA1 9c73ba1dc9a763299a3b1c1e6b9436439a03d029
SHA512 710ffaf7471e12cca2190f2acd85fc5b242d93b3a4d0efedeb4ceb950ca10947af6f335f4c1317743db748f7ab9e3614fbc0fd48a4c6a3d57ebc05973d924769
TLSH
T18FD022204E02BAE0A0B995F89A287B73012CAD228116187850AC1222423E2E80B8DB21
MD5 SHA1 SHA512 TLSH

Submit Download

41dff3db-2153-4a6f-aad4-54af469e421d.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\41dff3db-2153-4a6f-aad4-54af469e421d.tmp
Size 171B
SHA256 ded537b17acc830211b21ab8426dab0115ae046e678c118050aa789e35e0d9ca
MD5 91de37e131b944627c2ea9022a00ecae
SHA1 a3bddf7ab16925ecdf484724b9be662ede203488
SHA512 073aecaa0ad192f2a1617f4edde1005935bd1c507659ac9317e71a27428a7505c27e65dd333a15b582e4e7e1b71a73548da9ac7aa64f32827c7b35c1b0697fa4
TLSH
T137C08CA5F0C026B99C155ABCF95D7B31691B46052D11C0DC00E816CD6282578926EAA0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 d9553e797b38cd91d71fb2b670c00c7ed54cb06b6b66e42a098407ba58cc5c4f
MD5 43ae41b2d5ee13f9f457ad2d7c24f138
SHA1 2b0d395ec0bb85d4be26eb81149cc58c10237b16
SHA512 ccc9a1264cf2c8cadd35db6caf0a8656aaa0c19f9b7e50b50b56e998dc64213a60bf0deb83d9ba4a394ba30c08cc83da4d97bf8404bbef44be60e5c38b7c220d
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
Size 336B
SHA256 d8fbea8c10b12c6d76f228c71fc60631381457ea8ffe5bb6c5d3b77e88f57b53
MD5 15a32575c7f5189d6761ceffa166651c
SHA1 5c419a83dd56c643fdac79eaaed4fb17bcfdc270
SHA512 12a4130afc9b94eb257df88a8076ca811322626e7cd7babc20e837e92ff91396ed356e22290f82eb004da5a231f478e63c1a532b6fde9d1e9fd4b8f1d017477e
TLSH
T1CEE05E6498F40206FF160AF212F37E85010B392308013FC750A25D35769B6E5536650F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
Size 336B
SHA256 6c2374ac45ce5e9c5e4f6ff2ec036d80bb599ccf698ba8202617ef4faa455fb0
MD5 92c999ee9c1a72320a2012d3890a1d78
SHA1 4826ff082ec96b5f0de1579dad82c26a6f413a1d
SHA512 7e46003f1231473b0de3fcd5899e9325b813834fa4c53734dfec606bbdd67a83fef6496eb22585296d6f0b8d070308eca13a7925e1654375f99ada4c18c1b674
TLSH
T1C8E02B7498F40112FB1606F553F33780011B792244013ECA40A1BC257A896F5135281F
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

preview.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\bckiheihmdiaaoadimffbjbjafkoooaj\1.0.4_0\wallpaper\preview.png
Size 464KB
SHA256 c5a2b18b255c6a4029de97ef9d00af6e563b562a2abdbee1e934ff77d5a92c29
MD5 b22722b42e8b196c0e26ab8a8c6508c8
SHA1 2c4de3caa4409a164e31837f6bbf54c99d922c85
SHA512 a0904204f795dc7cdc6612867a87f60cbd27d1edbc70007e1fe5c4dfe83165ca287aed3319409a0829815e5175480e085775a9a3285d1d20d629b28641fddc99
SSDEEP 12288:lrGu17lQ0NW4Lwq23Po85e16slc0hyKQuhZSAS2T9PPdHNCPsOP83JDxj54:lrxvw73H521IKxh9S2TVPdHNwYDxN4
TLSH
T1A4A423E043F7207FC6678D44F640C86E15ACF52ED99C58CBEBEB401541AB8A4ED1C6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favicon_opera_one.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\favicon_opera_one.png
Size 2KB
SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
MD5 723cf51fae375f557b2f891a2ea603ef
SHA1 40f374149ae6f8f5b847be59ba019744c232ebd5
SHA512 d0f64a88cf62642adf30af333f81481f43fd2141c63a135162152d1c7fa705b52121cac69edab0f93d35cc425b43fb6d6af2adc4323e5ad8e11109a423ff6eaa
TLSH
T1D4411A8324F7F9A0FE30E5AF1353E0454E655B9E2B512738128D08B4A4BA6DE92D202F
MD5 SHA1 SHA512 TLSH

Submit Download

reader_mode.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\reader_mode.js
Size 112KB
SHA256 4f72bc46754ceed048dccf5c83fa36067f144e5ba13b046b12538808986e3252
MD5 59de0decd0e4751b14231dde34507403
SHA1 5892abedcec573765d8247204ae038ff4c44848c
SHA512 16a7716b4afd10d0984c99fdb4e2617af3ca0a96f7599d22675924760b72ac00bd5460de75b46fb26bbdeef9ac4ddd432bd70c47467d3cacf345af5e552de4db
SSDEEP 1536:Ska6rka6dmEctzRw8qxUyIVGjYG6xpvAI3z6A0k5miSZ75U66dpXdd0yUY70Lcx6:Ska6rka6vszmxnS9lbv93NddM3prX+wH
TLSH
T1C4B3D9ADB3927199928320E502FB0047E3355D451C1A5038F669E5DFBC24AAA62FFF7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

spotify_frame_interceptor.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\spotify_frame_interceptor.js
Size 5KB
SHA256 a6b9c0dcf141b8ac58176b870851294e492ecc79a83c8efbfc85e35cb3cada0a
MD5 6586f73b98953dc3d70ffd9a61e24911
SHA1 3e9de04cd595f3a391392a92010633d1d0608a38
SHA512 8ff2b9b2ac25b0cc60e79ac6399bed6d02a29b1f92ab499a89878c63618460a70a2d0e3f2309b227fda01e03c3427c4a11940b4b95704ada5689f80c385adda2
SSDEEP 96:xSVa6rQaSVa6j38bo5bYe3m/I6FScpoV9FzKovz1fFUAJxuisb71TTta12Ho6Io:xka6rka6j3805se3m4XFzVJFs31wx6z
TLSH
T16AB1B505815C4C7D8FB5028A9ABE135212DE2283787BD4C4EFA3C47597353CE9213BB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e8108a2f-62c4-4c90-8f86-307ad863fb5b.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\e8108a2f-62c4-4c90-8f86-307ad863fb5b.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
Size 11KB
SHA256 3f78c20b2ad7b46a267524b6311f9eb1afd970038a981d79965629ef7b78c268
MD5 464ee6f1eca59aed882c3abe51cc366a
SHA1 b4e0695ed4ac3554a02ac87aad056cb402ef1b0e
SHA512 09b6b2916d3e21441dc7736bb70f702811131f278715bdf2f88a67f67494b91381e4a3ceb89307f9d4605a54c56dcf5e2eb5daa5df2e0a59683e0b867b07b0dd
SSDEEP 192:YCbVF13vkkiqXMutvzMQrhtmzZDnOKwTJPJPAlsgb+WNOucjy7CmyIsn2agL4M:dXc54ymGLJ
TLSH
T1EB32324E98212EBB5CD26576F750FB57E3F40110A1567E94BBF8892C06CB2ED6022E83
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
Size 15KB
SHA256 9fa0cbfe5d2f9b9ddd249ae91b7bb71a2f3f0880f6d0e5cd00367cc4ea34c3fe
MD5 0b13cdc8ea9b47d45339c2ab17c542b4
SHA1 d0b3fab4dc91ee2426c72a75be64551e14132dab
SHA512 293d26084e0f33ffae7fd215105a4ca4e0ba89464d771a238f45e399c1251076b46722d6f4cc0f8d514510ff7257e79d280dda111feaba08befb9c34795bf9de
SSDEEP 192:27CGXh79R1ah2rcDt+IJ5Dh93q5C9ciVF13vkkiqXMutvzMQrhtmzZDnOKwTJPJI:2ODXcd/a4yT3x8JJ1j
TLSH
T11462434AA4742EBE19D2657BF690FB3AE3E50010D2556F94BBF9C92C11CF2EDA011D83
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
Size 90KB
SHA256 f23dc332791e1c5ff8f21286f35bab2e5cc6f4ca1eacbfa9288d558afb9c8a76
MD5 c8ae22fea0e093723b6288ecaca63945
SHA1 1e1e4e2395233d3963e85aecf557b45ba9db31f2
SHA512 040324c0be7248818218c5b885eabbce28c447cbba6395be2f5d60910772651d535605e3defc60dd767299ef3e3e13c9333e6ff4d33cd03753c180235a83cce8
SSDEEP 1536:qHNHk6YdHoQhHE7Ht7EXHguQHE8HWIAH2H58HErRCHmCkvocXTjHGHhsOG4UHI9w:wQ6usy1G3FhA+XTGlSOe
TLSH
T18693D8E6CCCD9F758ED98BF9DC36AB1B99940005ABDC9E14A7F9804C0386785213F647
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
Size 90KB
SHA256 28cb8a929bef32c9e3a1ba87d86c0bdd2d8c135d0102864e4bdbf2cd59e0caab
MD5 a0631163f9493b50771b540fabe11fb9
SHA1 72e79d7e52cfe799e13657b44ec856e1e1c19ef1
SHA512 7f944b3a96986fbeeb114aae4c51f4c75775541e252a95a95025de085830f6de8bc968cdad4d69a4f1f4cdf28994d33a37dca2d548dbbd544f41ab138e78b3b4
SSDEEP 1536:BHNHk6YgHoQhHE7Ht7EXHguQHE8HWIAH2H58HErRCHmCkvocXTjHGHhsOG4UHI9j:gQ6usy1G3FhA+XTGnMrQ
TLSH
T1AB93C8E6CCCD9F758ED98BF9DC36AB1B99940005ABDC9E14A7F9804C0386785213F687
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d5cfa48c-543f-4111-9709-02f163d7148a.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\d5cfa48c-543f-4111-9709-02f163d7148a.tmp
Size 72B
SHA256 c6d02cd6c76f4fb4072673b9a4c5212e40732ba222ef3e8a552e37a4eaede97a
MD5 121c0e9f23530ceae3b00af3ad52a591
SHA1 1e9cc39a1c886a2981136c02c5593e669718b6a7
SHA512 9ca6bc979f9f2144afb8014fb7cc57ef43773f70467366e3aae513ce87372b51367803fbf4b6248d0b39861f53e0154fe5a1b7192c4c5b6556bba8cdcae965c6
TLSH
T197A0021702908518C14802B0285283886202BA35C40187A7B6D4034A8D7006A4951145
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 37a98411563ed2e75839c3befd49b3d3665f1cf8899873f570d5c6dc79aab030
MD5 a40910afdc73812be0b8779b45f8f63c
SHA1 5dea8163ca192e73b6d3fcddf866ea2e9da11d28
SHA512 4449a87ffb29d6933ffded6e6ec861262a8ef73806ac950b2b362454a432853881bdbb11f5264743421774f3851cc91b6814f393650c15de6b7fe6aade0f1729
TLSH
T1D6B01220884F2242C40006B0354700C813229F2182010701456042A6CC930725221107
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 6c310664b1c72e763f2a4f8cc64598327c34bbe39629967ea758bbb1a302e440
MD5 934d509bfb3ae3dfdfcb4e5b2ec50909
SHA1 70216c1481a33a9a9b3d059f692c8ef8dd5050a8
SHA512 192e6f0f9cf5cd4acba12f02f2f80eaa10f8dfe09ae78b19c8cadb7810631be1a17a77b1d54cacbcc7daeaba17b7d6a4f48f8411ef03d88d7bc0cea4b61bc554
TLSH
T1B5B01221884F3341D41043B43107004413119E298142030345609165DC520711231002
MD5 SHA1 SHA512 TLSH

Submit Download

28083fb9-7293-4d70-ac45-d0df568c2694.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\28083fb9-7293-4d70-ac45-d0df568c2694.tmp
Size 10KB
SHA256 e16cb162fc39bd71291ec23be3e8fc9bda9338470987453a9d2e2bbf2963fd33
MD5 654aec3532db3715132be58c0d5d8b63
SHA1 ff7a80782acb79cd3acb47a87edec92b2c0a73d7
SHA512 89b9021203d3516caf72b781c10e530dcc01d5fe5c9b8bfa0e4d8246dd265873bafd906af8af1adb15825b5425af55065a600173a4536ef59c7fdddbb830675e
SSDEEP 192:W2lLAyaDDo54ZQKNQX2v6S0zS+bVe2ZMxwKm9pvDcOJt+o60Sg6n76MrxqZbSdLh:WDZ/3f5DsS2VeGHKmjQOJ16m6n76xxSL
TLSH
T17722CF5E54DACF142D4F4DCCAE8C2840A774649C6277752A94E9BC8545B22FB0342EFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2e5c48c9-7df0-406a-9f70-f5f702538929.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\2e5c48c9-7df0-406a-9f70-f5f702538929.tmp
Size 381B
SHA256 364ca92cb69fe9513ff40f89136103a68e8c9517002c9c9eba44f1df7f34bdd1
MD5 64ff5f411acc4315b554e2a51bbaebcc
SHA1 6c41d362a73d57baf4fac962bd3d3d443d70d62e
SHA512 1fdac805d6cddd61ac62cea6dd47920175cf73d9c392a408e4ab5bb07151ff6c72e7b5d76bbf1fafb500ad1b86daa0bbeee4e23a0a25a382488f92181cc71367
TLSH
T11BE06AB5CE0E5FD0D5E408D4755FF14A523C528CED00594415E4378352A0F738263473
MD5 SHA1 SHA512 TLSH

Submit Download

6a8fc96a-cf11-4c66-bbf2-27440775b893.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\6a8fc96a-cf11-4c66-bbf2-27440775b893.tmp
Size 9KB
SHA256 4aaea3c780a3013b1078b9826be1649044007da82e255f036ef43af0a28a895f
MD5 2e2a4d70347d37b8cd4007e5bb667cce
SHA1 a5e6eeb873b8b447dec5677478f2049032ef400d
SHA512 7ff3093db6dd1520400692624e2319976bf7709f218ceca0083cba42be945de57f9572d2875d01059088e726bad0503a772bd4410807a9454fdbc94d3b8a2d2f
SSDEEP 192:75vD6eYFte0eKf1uHkdxnpXsdEWvfKDvbYwwKY+w9i:tyc9EdJpXGvMbY+z
TLSH
T17112B011BB270B9E5065134367382E0A1CB6BE49359AAC74F78516FF469E1B30186CE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

76602252-1e5c-4a8e-a0bb-68fb7004f00a.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\76602252-1e5c-4a8e-a0bb-68fb7004f00a.tmp
Size 381B
SHA256 f1a5b230eec2d53a14ccba8c89662f283fdd548924dcccde04c0a07e4bbfeb38
MD5 40aa17acfa16322228daf9471910f594
SHA1 265aee3d7ac89e2566f31b86c567dd24a13cf6d4
SHA512 533af62510b9ec3e7a9b8e659381d2a5b3c0bc1ea5aa17a26750f12402b7e9d29c5092a324aa3e8711825d832f479b53c4fdbedb79097cd95d0062fa355f85a4
TLSH
T1C1E0F19A0A06A84225D33606295FA44ED00543814BE3E85A128940D00089EAE2AC6711
MD5 SHA1 SHA512 TLSH

Submit Download

ac6c5669-ecab-4ee0-a298-976222982780.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\ac6c5669-ecab-4ee0-a298-976222982780.tmp
Size 381B
SHA256 27df06e2aae88a7b443475aa2885b9c31e9098cf01713337a41befa63f236467
MD5 18f945a99c2330c777cb3162eee612a9
SHA1 728a2fdb612e4ff0a5f876e9713885933a4513a8
SHA512 e1ed5580af79a83d9be0dc77d43c0c1e5d81a7f7d4354dffa6f002bd82d763d946014bcbe5ae7d9579cb69b265d2a7f152530db2b15b892746f5e19c983d9f35
TLSH
T16FE0C0D98DECA9BE13DEEA2087F63654752713988B1E483D6344D3060F06D89535FB8E
MD5 SHA1 SHA512 TLSH

Submit Download

session_0910b590-9dcc-4112-ba8e-caaccfab3d3f.raw

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0910b590-9dcc-4112-ba8e-caaccfab3d3f.raw
Size 1KB
SHA256 ba744ad0e6a286bd3d8a8b42d26f02fe14a4f001ee4ed8733f112b8fdd90a4fb
MD5 4b97c57b4f376c7d363ffe2486887199
SHA1 46ea12e8f7d8bc0a62ffcd8f8a1a529079c5e9f7
SHA512 a4f107e0d5ede75fb82e9afb987bb2c87f1162261158ed3c202a03e7c700ff994438476b692c36d1560caa61eab787cebae1feced1c4c4638d30578b3395d5d1
TLSH
T1942196F9B59DD9E1930A76B45E2D53E5FB40C110542E010C0D9A1186FA493960F6AD34
MD5 SHA1 SHA512 TLSH

Submit Download

session_0910b590-9dcc-4112-ba8e-caaccfab3d3f.raw

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0910b590-9dcc-4112-ba8e-caaccfab3d3f.raw
Size 1KB
SHA256 4b3c35132642e6b07695cf11a121c18f6b7082b48b3127ed32fefc0c002a6df7
MD5 f271116f0f63b29e5227d5093f3e21cf
SHA1 37154a179bfc619cdd5eaf1ae98d637a0fa9b67d
SHA512 a0cae1ecd74abc4a0cd9710ad2a57cd061346e117ca20117f8c5759ce340a39891b4626a04d35d146de419553fc85ce33dbd4906707397c00342f224db3ee5a9
TLSH
T1A721F8700D21EEF0F08422307203068C678C8629246A849D3801A72B54FB5BC9E4A5F8
MD5 SHA1 SHA512 TLSH

Submit Download

session_0910b590-9dcc-4112-ba8e-caaccfab3d3f.raw

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0910b590-9dcc-4112-ba8e-caaccfab3d3f.raw
Size 1KB
SHA256 41d1c146d7fcd82098656e1fcd2a91a30c36ac3edfc80b0ee7b0bcc8eb64eb7e
MD5 e122a93985ed015274498bc19f56baea
SHA1 400e6fcb3ac0906d9567d94962de34b2068fb597
SHA512 c4a80155ff9e68a372b31121e1533c04f655c3664986a52a72229bf5c012b482982bcfbb982c8bbf0a6f80fbdb57e51e136bb3ce194927ee7e4fceafb2486369
TLSH
T13321E774A0391B730CCDA85557AF3B928CA64D91938DA24AA71C77C674B402A5A75680
MD5 SHA1 SHA512 TLSH

Submit Download

session_0910b590-9dcc-4112-ba8e-caaccfab3d3f.raw

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0910b590-9dcc-4112-ba8e-caaccfab3d3f.raw
Size 1KB
SHA256 2fe2cf0c9ef865f8b247ee04f718c3a54589a9ccf679ea6e921aa5b2f91bce48
MD5 5dfb3c24689aaa78b027a7e7053bace1
SHA1 4e602caa796e08f75aa31dfc48ffd8b81a81b8d1
SHA512 04afdda779f8b5b96dd658920ee9f7dd8bea49b3a17e4b1bda9e1a6e70cf692a0e6d728e5ec8cc8f5af1aa48267f99a33700a40470b501510d6589f1690d7a0c
TLSH
T14F21C63E32FC4788F07294429C24B843DADF4F26724553998A3B29C49D7B9134463AA1
MD5 SHA1 SHA512 TLSH

Submit Download

session_0910b590-9dcc-4112-ba8e-caaccfab3d3f.raw

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0910b590-9dcc-4112-ba8e-caaccfab3d3f.raw
Size 493B
SHA256 179e6ffdff6cad500e7ca1d4765f19e13115bfbf5b2212534de200b8d1b35ee6
MD5 30a144a544a99f001fc65adf64062cef
SHA1 96d9f645c2c7ee8a9763b0b3566328f16dc9e9af
SHA512 bfbd379759a04aba429a52206b9770af4bb2f72619e1fc5f63308fdf73af434915835ce0450548a29d62dcfc4b91747b3c2d4f4e0fa7dfb0c164ea973ed5ab0d
TLSH
T1CEF00E2CAD31C34A1092C5C8A18CACFBE9CEBB7202D058B9A20405A400F269D58553FA
MD5 SHA1 SHA512 TLSH

Submit Download

session_0910b590-9dcc-4112-ba8e-caaccfab3d3f.raw

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0910b590-9dcc-4112-ba8e-caaccfab3d3f.raw
Size 605B
SHA256 cd79be01974c732e60daba9c10fc392dcb02ac729d6accd4d1270ec956875ea2
MD5 12440de7f45912a55ab21c9da25d2185
SHA1 99efd200106c72f83603ca9ee9111530014f74c2
SHA512 7759269951487bb0ff2bd431e1d6d4891e9d21b1377d04c13bc283e9a6ed4b5a915c1db4910589a6ff3e06c3631a329c0e26bd7c6d527f0b1de42811d9d1599a
TLSH
T12CF0B702813AF15D5988ACB471079F95B0CFDCC60F14D2DA00EF3A4183D9956D041434
MD5 SHA1 SHA512 TLSH

Submit Download

session_0910b590-9dcc-4112-ba8e-caaccfab3d3f.raw

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0910b590-9dcc-4112-ba8e-caaccfab3d3f.raw
Size 765B
SHA256 f50e01699613a1c22f6d3afef161f52e659d595f981f9a2c7855a907c4e0c0f9
MD5 c595dd59f6a4a0b15eee1eba5ca3d0a4
SHA1 ac2db0631a687575590ff52ba730d5162a352f76
SHA512 b743282429a0bb49a7d3df493e77c3fd0f11c32d9872b6fca530d447866d7b997cf93685c384f3ea28d99d95dc64125824ee132b5e0bf94faea304bb5dcd2531
TLSH
T1A901B5EF2D265C4259C1142F32EED26E5ECD32CDCE888B25C8D831EB980CF82E25044C
MD5 SHA1 SHA512 TLSH

Submit Download

session_0910b590-9dcc-4112-ba8e-caaccfab3d3f.raw

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0910b590-9dcc-4112-ba8e-caaccfab3d3f.raw
Size 781B
SHA256 3866bcca0fc0054faf37701cc2d07dd417fc82d51cd86f1969c2d3f52bb22d72
MD5 dc6142f29324b46a3bb0e14377b917b8
SHA1 6ce470e23da6e600c4e740bdeafe4e9a77a9bb06
SHA512 fdd6852ebe3859ce1e9ae98381c14adc12883f6bd1aa6fc31ddafee31505b93419139c1c647eed7e71ef49f20c104c1eced0f09c3a8bad2c857505e699113c05
TLSH
T15301F69B15935877EEA42F4A1DE22BC041982FE6D4004DDD24EF54556067536E622216
MD5 SHA1 SHA512 TLSH

Submit Download

session_0910b590-9dcc-4112-ba8e-caaccfab3d3f.raw

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0910b590-9dcc-4112-ba8e-caaccfab3d3f.raw
Size 781B
SHA256 e941835ffce9ce809bbe50d5608ae094d7ce94c7cafaf7dbf8a4fa59fdd0e322
MD5 a59eddad44762065bcdad7b329f07b01
SHA1 916bccacb2c4054bc052a38484e920e3fdd6d769
SHA512 b8817045537c70482105ebdff89a31f5051787f3911ef939840ac643e82cdfd2b68ecc04234f56fac0318d026a60ae0a030937baabf2de1ac2dd5856bc0e5f44
TLSH
T1D101C5904A90833DF01E0806DDEAE9C40612C648C93DE90F3052A0ACB3BD8220C240C9
MD5 SHA1 SHA512 TLSH

Submit Download

session_0910b590-9dcc-4112-ba8e-caaccfab3d3f.raw

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0910b590-9dcc-4112-ba8e-caaccfab3d3f.raw
Size 957B
SHA256 a6ea6981eb1fa1be458e18133210378ce1134457b9f1ed35a3fa02b4afe6090f
MD5 02dcd1d3a9851ee306746f70ca75d854
SHA1 0d2db1fb6f294a769adeecf65d95b7b8582b7aed
SHA512 26ce7ee0d98787e2cd7794bcf3647c1c6fb3d1e71ff227c2a49530def1064237e923600ffebb69b423ee87d72d85550cd81bb779fefa14df2321d8c07685901c
TLSH
T19811C821524A80D605700CAEB552B317FB1FE7D493A71DA2BF71B45ECC4B46A7EA8184
MD5 SHA1 SHA512 TLSH

Submit Download

session_0910b590-9dcc-4112-ba8e-caaccfab3d3f.raw

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0910b590-9dcc-4112-ba8e-caaccfab3d3f.raw
Size 1KB
SHA256 00c0f0e1360d29de72ab854f902bd42b49fea6fb1235c4755a4583a4de9312c6
MD5 2d4840af380f563b8cfd1f871e1ae746
SHA1 443a75dc886f6ada71bd443acd02a9e2c2bd6365
SHA512 c40851d4d465eb28c459d3a69e6f3ae4861d1b38d469b0308b39b94f7c550ab462be2d14b0500d7ebdb49a66523b73628cee4ac7aa0f66d0c3ac90f0f6195ca7
TLSH
T17F31C7DC4F5810EEA108B0262706F4D8C57FCF2081A91A5112603673E2825A1757E4BF
MD5 SHA1 SHA512 TLSH

Submit Download