Overview

overview

8

Static

static

8

OperaInstaller.exe

windows10-2004-x64

8

OperaInstaller.exe

windows11-ltsc_2024-x64

6

Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    25/08/2026, 22:54

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaInstaller.exe
  • Size 178KB
  • Sample260825-2vsqxazelc
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Checks computer location settings 2 TTPs 25 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 3 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 12 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 6 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 6 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies registry class 51 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 21 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 10 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe"
    1⤵
    • Downloads MZ/PE file
    • Checks computer location settings
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:764
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:4216
      • C:\Users\Admin\AppData\Local\Temp\7zS87004BA8\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS87004BA8\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
        3⤵
        • Downloads MZ/PE file
        • Executes dropped EXE
        • Enumerates connected drives
        • Modifies system certificate store
        • Suspicious use of WriteProcessMemory
        PID:3252
        • C:\Users\Admin\AppData\Local\Temp\7zS87004BA8\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS87004BA8\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=135.0.5973.41 --initial-client-data=0x298,0x29c,0x2a0,0x270,0x2a4,0x7ff77799e608,0x7ff77799e618,0x7ff77799e628
          4⤵
          • Executes dropped EXE
          PID:1200
        • C:\Users\Admin\AppData\Local\Temp\.opera\8d48b385-2e31-4b08-abcf-db2568844536 Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\8d48b385-2e31-4b08-abcf-db2568844536 Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:3360
        • C:\Users\Admin\AppData\Local\Temp\7zS87004BA8\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zS87004BA8\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=3252 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\8d48b385-2e31-4b08-abcf-db2568844536 Opera Installer Temp\opera_package_20260825235514" --session-guid=b8e2e767-38a4-4bad-a2ad-0e4888272baf --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=FC07000000000000
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Suspicious use of WriteProcessMemory
          PID:1044
          • C:\Users\Admin\AppData\Local\Temp\7zS87004BA8\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zS87004BA8\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=135.0.5973.41 --initial-client-data=0x2a4,0x2a8,0x2ac,0x274,0x2b0,0x7ff77799e608,0x7ff77799e618,0x7ff77799e628
            5⤵
            • Executes dropped EXE
            PID:4904
          • C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\installer.exe" --backend --initial-pid=3252 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\8d48b385-2e31-4b08-abcf-db2568844536 Opera Installer Temp\opera_package_202608252355141" --session-guid=b8e2e767-38a4-4bad-a2ad-0e4888272baf --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=135.0.5973.41
            5⤵
            • Executes dropped EXE
            • Enumerates connected drives
            • Enumerates system info in registry
            • Modifies registry class
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:5016
            • C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=135.0.5973.41 --initial-client-data=0x294,0x298,0x29c,0x26c,0x2a0,0x7ff68ff7e608,0x7ff68ff7e618,0x7ff68ff7e628
              6⤵
              • Executes dropped EXE
              PID:1464
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\8d48b385-2e31-4b08-abcf-db2568844536 Opera Installer Temp\opera_package_202608252355141\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Program Files directory
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:3364
              • C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=135.0.5973.41 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ff9096014f0,0x7ff909601500,0x7ff909601510
                7⤵
                • Executes dropped EXE
                PID:2376
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --subproc-heap-profiling --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1776,i,17727152081874313117,2107300235245940594,262144 --field-trial-handle=1828,i,8821193817772654463,17392440786042377220,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1832,i,8824986228960631496,6824067414981802050,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1824 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4908
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --subproc-heap-profiling --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2164,i,2961757775504317694,1409725524221156564,524288 --field-trial-handle=1828,i,8821193817772654463,17392440786042377220,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1832,i,8824986228960631496,6824067414981802050,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2180 /prefetch:3
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Time Discovery
                PID:1628
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2460,i,12766556864208359602,11229069190365718189,524288 --field-trial-handle=1828,i,8821193817772654463,17392440786042377220,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1832,i,8824986228960631496,6824067414981802050,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2472 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:1308
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3620,i,7427477967421202502,10732918861491678222,2097152 --field-trial-handle=1828,i,8821193817772654463,17392440786042377220,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1832,i,8824986228960631496,6824067414981802050,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3660 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                PID:2636
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4312,i,9281448742355156311,17805203313012529339,524288 --field-trial-handle=1828,i,8821193817772654463,17392440786042377220,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1832,i,8824986228960631496,6824067414981802050,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4336 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:3104
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4292,i,11975052999285997499,4061354703878821550,2097152 --field-trial-handle=1828,i,8821193817772654463,17392440786042377220,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1832,i,8824986228960631496,6824067414981802050,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4372 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:8
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4636,i,15154182713196296512,3268023322828072977,2097152 --field-trial-handle=1828,i,8821193817772654463,17392440786042377220,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1832,i,8824986228960631496,6824067414981802050,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4704 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4256
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4812,i,13028187945580663555,1674963727781803710,524288 --field-trial-handle=1828,i,8821193817772654463,17392440786042377220,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1832,i,8824986228960631496,6824067414981802050,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4828 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:3300
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4592,i,13041889458388080694,15195483762206089509,524288 --field-trial-handle=1828,i,8821193817772654463,17392440786042377220,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1832,i,8824986228960631496,6824067414981802050,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4660 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:3464
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5096,i,13818576641457392162,853043212864338262,524288 --field-trial-handle=1828,i,8821193817772654463,17392440786042377220,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1832,i,8824986228960631496,6824067414981802050,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5100 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5424
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\8d48b385-2e31-4b08-abcf-db2568844536 Opera Installer Temp\opera_package_202608252355141\additional_file2.tmp"
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Program Files directory
              • Checks processor information in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:5676
              • C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=135.0.5973.41 --initial-client-data=0x23c,0x240,0x244,0x238,0x248,0x7ff9096014f0,0x7ff909601500,0x7ff909601510
                7⤵
                • Executes dropped EXE
                PID:5684
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1660,i,4690572251282216973,4069580751873689913,262144 --field-trial-handle=1908,i,6395165888177239756,3186642627949530741,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,7563741102459093108,8412203513479312833,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1904 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:5892
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2084,i,14133420566349745336,6503458977052159028,524288 --field-trial-handle=1908,i,6395165888177239756,3186642627949530741,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,7563741102459093108,8412203513479312833,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2100 /prefetch:3
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Time Discovery
                • Enumerates system info in registry
                PID:5908
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2452,i,10087517671754939661,129118367152885386,524288 --field-trial-handle=1908,i,6395165888177239756,3186642627949530741,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,7563741102459093108,8412203513479312833,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2664 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:5164
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3836,i,13197688673353683101,8757452594504844692,2097152 --field-trial-handle=1908,i,6395165888177239756,3186642627949530741,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,7563741102459093108,8412203513479312833,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3848 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                PID:4412
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3376,i,15142768528398709495,17100782603195595090,524288 --field-trial-handle=1908,i,6395165888177239756,3186642627949530741,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,7563741102459093108,8412203513479312833,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3988 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:3100
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3984,i,14215494587824304546,6893704046548354549,2097152 --field-trial-handle=1908,i,6395165888177239756,3186642627949530741,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,7563741102459093108,8412203513479312833,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4132 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4876
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4444,i,3888021442313774719,17282363314902251207,2097152 --field-trial-handle=1908,i,6395165888177239756,3186642627949530741,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,7563741102459093108,8412203513479312833,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4316 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5192
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4916,i,16163827015573220204,4299668011514827870,524288 --field-trial-handle=1908,i,6395165888177239756,3186642627949530741,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,7563741102459093108,8412203513479312833,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4896 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:760
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3940,i,638489811469410933,17667386373563023909,524288 --field-trial-handle=1908,i,6395165888177239756,3186642627949530741,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,7563741102459093108,8412203513479312833,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4944 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:1004
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4936,i,16834139205591512441,6555761498812629740,524288 --field-trial-handle=1908,i,6395165888177239756,3186642627949530741,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,7563741102459093108,8412203513479312833,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4028 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:2864
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Program Files directory
              • Checks processor information in registry
              • Enumerates system info in registry
              • Modifies registry class
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:5384
              • C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=135.0.5973.41 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ff9096014f0,0x7ff909601500,0x7ff909601510
                7⤵
                • Executes dropped EXE
                PID:5344
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1876,i,16202694406322245534,42586589412981576,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2072 /prefetch:3
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Time Discovery
                • Enumerates system info in registry
                PID:464
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1660,i,12421059516676020465,16105178408072291182,262144 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2036 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5212
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2476,i,6147343250010082515,7147687822490163741,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2660 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:220
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3200,i,8378820451079354910,15316476113423814189,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3332 /prefetch:8
                7⤵
                • Executes dropped EXE
                PID:5232
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3364,i,14700499626616624716,3973405869441655750,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3444 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:5236
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3376,i,4398092537670704070,5807024096886189054,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3468 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:4772
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3388,i,14243357062296919510,15185509080123310635,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3488 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:5540
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3420,i,1504733793390272620,17287757379584384198,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3508 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:5144
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3432,i,3166390746833504649,11134199312653003046,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3528 /prefetch:8
                7⤵
                • Executes dropped EXE
                PID:2400
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3340,i,11069068851466399123,5923819504538549537,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3396 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:5288
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4228,i,11476831312960567191,1291001977593667610,2097152 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4236 /prefetch:1
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                PID:1676
              • C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\opera_gx_splash.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                7⤵
                • Executes dropped EXE
                • Modifies registry class
                • Suspicious use of AdjustPrivilegeToken
                PID:1108
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4684,i,3376359937123959563,9402426809218556819,2097152 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4696 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:3896
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4848,i,14559468989249481073,10339716203470022070,2097152 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4876 /prefetch:1
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                PID:5944
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5052,i,6357096288664296041,2726486339438423106,2097152 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5060 /prefetch:1
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                PID:6096
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5212,i,11395736484787474734,9368054905697919013,2097152 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5232 /prefetch:1
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:4420
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5944,i,4252566250415524557,3794965991282815629,2097152 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6052 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                PID:5448
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6664,i,14454712762093495468,5336271100477674223,2097152 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6732 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                PID:5396
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6772,i,14574155400607786373,16501557661378746684,2097152 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6828 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                PID:5804
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6276,i,2936927515564036883,3478419756873919160,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6292 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:628
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6512,i,7599454100759975823,9587723786245781153,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5608 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:1092
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7076,i,10320668512170131039,5362531328331295652,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7196 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:5664
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7204,i,7997463949172248199,12017618593598677943,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7356 /prefetch:8
                7⤵
                • Executes dropped EXE
                PID:5748
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7460,i,13615894992803968006,17159234372183328342,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7472 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:2632
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7480,i,14283557828486037037,11064930140775658766,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7500 /prefetch:8
                7⤵
                • Executes dropped EXE
                PID:5644
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5320,i,16625725875215263005,6748415557186509112,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7504 /prefetch:8
                7⤵
                • Enumerates system info in registry
                PID:5264
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7872,i,7508609573983087118,16747337010149352883,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7880 /prefetch:8
                7⤵
                  PID:2024
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8012,i,16732387234797815641,10955632517486118538,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8020 /prefetch:8
                  7⤵
                  • Enumerates system info in registry
                  PID:5024
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8232,i,2158673943596105248,2579989357464590393,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8196 /prefetch:8
                  7⤵
                  • Enumerates system info in registry
                  PID:2256
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8216,i,2962349556990759207,3454746505594382422,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8364 /prefetch:8
                  7⤵
                  • Enumerates system info in registry
                  PID:1192
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8372,i,2596268103818127614,16330715353615459075,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8408 /prefetch:8
                  7⤵
                    PID:1132
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8396,i,11542520135803923836,6570809603685015704,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8436 /prefetch:8
                    7⤵
                      PID:4120
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8412,i,6232554589329071220,8467096739282299000,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8476 /prefetch:8
                      7⤵
                      • Enumerates system info in registry
                      PID:1108
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8700,i,681569737771830401,17709336323535530585,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8916 /prefetch:8
                      7⤵
                      • Enumerates system info in registry
                      PID:4436
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8928,i,8812532875461908612,2910952556532121593,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8948 /prefetch:8
                      7⤵
                      • Enumerates system info in registry
                      PID:5376
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=9192,i,8599789188421456419,4673303228502264077,2097152 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9200 /prefetch:1
                      7⤵
                      • Checks computer location settings
                      • Enumerates system info in registry
                      PID:5744
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8164,i,1680103887467551552,6746116956453924243,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9408 /prefetch:8
                      7⤵
                      • Enumerates system info in registry
                      PID:5308
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=9528,i,5791352982837602710,15892513723243753692,2097152 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9540 /prefetch:2
                      7⤵
                      • Checks computer location settings
                      • Enumerates system info in registry
                      PID:4412
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9552,i,17539784440005583200,674252732782908300,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9708 /prefetch:8
                      7⤵
                      • Enumerates system info in registry
                      PID:5920
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9864,i,8882380713279124497,12188469282135604711,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9512 /prefetch:8
                      7⤵
                      • Enumerates system info in registry
                      PID:4068
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10336,i,18164669951265430714,9003777519093475812,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10352 /prefetch:8
                      7⤵
                      • Enumerates system info in registry
                      PID:6668
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10500,i,16338425584070596731,9075385902214750563,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=9560 /prefetch:8
                      7⤵
                      • Enumerates system info in registry
                      PID:6684
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10624,i,10137192722105859854,10087028650171161627,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10648 /prefetch:8
                      7⤵
                      • Enumerates system info in registry
                      PID:5868
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10836,i,922064422034442543,412653249317695780,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=10844 /prefetch:8
                      7⤵
                        PID:6044
                      • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                        7⤵
                        • Enumerates system info in registry
                        PID:6820
                        • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                          C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=135.0.5973.41 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x7ff7435dc278,0x7ff7435dc288,0x7ff7435dc298
                          8⤵
                            PID:6948
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11020,i,13549026774219038047,11477753848806596251,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=4560 /prefetch:8
                          7⤵
                          • Enumerates system info in registry
                          PID:6896
                        • C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\installer.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\installer.exe" --fix-taskbar-pins
                          7⤵
                          • Enumerates system info in registry
                          PID:6696
                          • C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\installer.exe
                            C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=135.0.5973.41 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ff68ff7e608,0x7ff68ff7e618,0x7ff68ff7e628
                            8⤵
                              PID:1880
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11232,i,1532371010508672707,4437909613142367020,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11188 /prefetch:8
                            7⤵
                            • Enumerates system info in registry
                            PID:6772
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11360,i,15661448224676301449,17261789153886405551,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=11380 /prefetch:8
                            7⤵
                              PID:5452
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11516,i,14858632953766604219,525908830455919924,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=11524 /prefetch:8
                              7⤵
                                PID:2036
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=11712,i,15358259497254198556,3972558720498472709,2097152 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=11724 /prefetch:1
                                7⤵
                                • Checks computer location settings
                                • Enumerates system info in registry
                                PID:6236
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4340,i,14955827414591093096,957191217159794563,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=8508 /prefetch:8
                                7⤵
                                  PID:6688
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11752,i,1524378406305048334,2839314578534587678,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=11744 /prefetch:8
                                  7⤵
                                    PID:6400
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3396,i,1453224901733877113,12398316270223501078,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=5496 /prefetch:8
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:6836
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=11732,i,15236993413259730059,15759847179079099588,2097152 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=9084 /prefetch:2
                                    7⤵
                                    • Checks computer location settings
                                    PID:6700
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9140,i,17486051328507143253,18419124845086744230,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=11764 /prefetch:8
                                    7⤵
                                      PID:872
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9104,i,6598378053753228386,18354901786276615357,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=9100 /prefetch:8
                                      7⤵
                                        PID:6436
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7924,i,5165568615424631650,8559625022883456123,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=10648 /prefetch:8
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:3132
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7872,i,7894049972200498431,8462366300857767369,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=8520 /prefetch:8
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:4512
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=3408,i,5813319417912181449,12144096062226034154,2097152 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=3500 /prefetch:2
                                        7⤵
                                        • Checks computer location settings
                                        PID:6372
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11696,i,13151749238888694620,5344940778756492521,524288 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=7948 /prefetch:8
                                        7⤵
                                          PID:6740
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=8580,i,15390507336552142575,7834223492000357102,2097152 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=11696 /prefetch:2
                                          7⤵
                                          • Checks computer location settings
                                          • Enumerates system info in registry
                                          PID:1904
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=8572,i,2103093979051860275,5093789964024579649,2097152 --field-trial-handle=2040,i,15061423279718368734,710446134126873466,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,18341686175984635145,15622656396994308166,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=3572 /prefetch:2
                                          7⤵
                                          • Checks computer location settings
                                          PID:5816
                                  • C:\Users\Admin\AppData\Local\Temp\.opera\8d48b385-2e31-4b08-abcf-db2568844536 Opera Installer Temp\opera_package_202608252355141\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
                                    "C:\Users\Admin\AppData\Local\Temp\.opera\8d48b385-2e31-4b08-abcf-db2568844536 Opera Installer Temp\opera_package_202608252355141\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"
                                    4⤵
                                    • Executes dropped EXE
                                    • System Location Discovery: System Language Discovery
                                    PID:3768
                                  • C:\Users\Admin\AppData\Local\Temp\.opera\8d48b385-2e31-4b08-abcf-db2568844536 Opera Installer Temp\opera_package_202608252355141\assistant\assistant_installer.exe
                                    "C:\Users\Admin\AppData\Local\Temp\.opera\8d48b385-2e31-4b08-abcf-db2568844536 Opera Installer Temp\opera_package_202608252355141\assistant\assistant_installer.exe" --version
                                    4⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    • System Location Discovery: System Language Discovery
                                    • Enumerates system info in registry
                                    • Suspicious use of WriteProcessMemory
                                    PID:2824
                                    • C:\Users\Admin\AppData\Local\Temp\.opera\8d48b385-2e31-4b08-abcf-db2568844536 Opera Installer Temp\opera_package_202608252355141\assistant\assistant_installer.exe
                                      "C:\Users\Admin\AppData\Local\Temp\.opera\8d48b385-2e31-4b08-abcf-db2568844536 Opera Installer Temp\opera_package_202608252355141\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0xed4040,0xed404c,0xed4058
                                      5⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • System Location Discovery: System Language Discovery
                                      PID:4520
                            • C:\Windows\SysWOW64\DllHost.exe
                              C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
                              1⤵
                              • System Location Discovery: System Language Discovery
                              • Suspicious use of SetWindowsHookEx
                              PID:4380
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                              1⤵
                              • Executes dropped EXE
                              • Loads dropped DLL
                              • Suspicious use of WriteProcessMemory
                              PID:5956
                              • C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\opera_crashreporter.exe
                                C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=135.0.5973.41 --initial-client-data=0x234,0x238,0x23c,0x230,0x240,0x7ff9096014f0,0x7ff909601500,0x7ff909601510
                                2⤵
                                • Executes dropped EXE
                                PID:6032
                            • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                              C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                              1⤵
                              • Enumerates system info in registry
                              PID:6960
                              • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=135.0.5973.41 --initial-client-data=0x224,0x228,0x22c,0x200,0x230,0x7ff7435dc278,0x7ff7435dc288,0x7ff7435dc298
                                2⤵
                                  PID:6168
                                • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                  "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                  2⤵
                                    PID:6624

                                Network

                                      MITRE ATT&CK Enterprise v16

                                      Reconnaissance

                                      Resource Development

                                      Initial Access

                                      Execution

                                      Persistence

                                      Boot or Logon Autostart Execution

                                      1
                                      T1547

                                      Registry Run Keys / Startup Folder

                                      1
                                      T1547.001

                                      Event Triggered Execution

                                      1
                                      T1546

                                      Component Object Model Hijacking

                                      1
                                      T1546.015

                                      Privilege Escalation

                                      Boot or Logon Autostart Execution

                                      1
                                      T1547

                                      Registry Run Keys / Startup Folder

                                      1
                                      T1547.001

                                      Event Triggered Execution

                                      1
                                      T1546

                                      Component Object Model Hijacking

                                      1
                                      T1546.015

                                      Defense Evasion

                                      Modify Registry

                                      2
                                      T1112

                                      Subvert Trust Controls

                                      1
                                      T1553

                                      Install Root Certificate

                                      1
                                      T1553.004

                                      Credential Access

                                      Credentials from Password Stores

                                      1
                                      T1555

                                      Credentials from Web Browsers

                                      1
                                      T1555.003

                                      Unsecured Credentials

                                      1
                                      T1552

                                      Credentials In Files

                                      1
                                      T1552.001

                                      Discovery

                                      Peripheral Device Discovery

                                      1
                                      T1120

                                      Query Registry

                                      6
                                      T1012

                                      System Information Discovery

                                      5
                                      T1082

                                      System Location Discovery

                                      1
                                      T1614

                                      System Language Discovery

                                      1
                                      T1614.001

                                      System Time Discovery

                                      1
                                      T1124

                                      Lateral Movement

                                      Collection

                                      Data from Local System

                                      1
                                      T1005

                                      Command and Control

                                      Exfiltration

                                      Impact

                                      Replay Monitor

                                      Loading Replay Monitor...

                                      Downloads

                                      opera-one.jpg
                                      • Path C:\Program Files\scoped_dir5384_2091992696\opera-one.jpg
                                      • Size 194KB
                                      • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      persona.ini
                                      • Path C:\Program Files\scoped_dir5384_2091992696\persona.ini
                                      • Size 207B
                                      • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      opera-one-dark.jpg
                                      • Path C:\Program Files\scoped_dir5384_919865259\opera-one-dark.jpg
                                      • Size 349KB
                                      • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      persona.ini
                                      • Path C:\Program Files\scoped_dir5384_919865259\persona.ini
                                      • Size 217B
                                      • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                      • Size 471B
                                      • SHA256 51978edbc11c61ff42b47de683f0454c41159d3b0419702c387626cc8ffe4233
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                      • Size 416B
                                      • SHA256 f1777fb9af0dfd94fa9d11e3dd00fe8a3dcae344304ac103c7fa9246dbbc9bbc
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      data_0
                                      • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_0
                                      • Size 44KB
                                      • SHA256 200030cb19cabf504d80a60013f1b257650ce1821dabd42d5ef3ae11800b9820
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      135.0.5973.41.manifest
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\135.0.5973.41.manifest
                                      • Size 225B
                                      • SHA256 aa5a1ed3b99720eb5d204aaa125842b8b3c309b0b8ca8c5e24ffbbcd4604da31
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      150x150Logo.scale-100.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\Assets\150x150Logo.scale-100.png
                                      • Size 1KB
                                      • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      150x150Logo.scale-100_contrast-white.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\Assets\150x150Logo.scale-100_contrast-white.png
                                      • Size 1KB
                                      • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      150x150Logo.scale-140.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\Assets\150x150Logo.scale-140.png
                                      • Size 1KB
                                      • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      150x150Logo.scale-140_contrast-white.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\Assets\150x150Logo.scale-140_contrast-white.png
                                      • Size 1KB
                                      • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      150x150Logo.scale-180.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\Assets\150x150Logo.scale-180.png
                                      • Size 1KB
                                      • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      150x150Logo.scale-180_contrast-white.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\Assets\150x150Logo.scale-180_contrast-white.png
                                      • Size 1KB
                                      • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      150x150Logo.scale-80.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\Assets\150x150Logo.scale-80.png
                                      • Size 827B
                                      • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      150x150Logo.scale-80_contrast-white.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\Assets\150x150Logo.scale-80_contrast-white.png
                                      • Size 799B
                                      • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      70x70Logo.scale-100.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\Assets\70x70Logo.scale-100.png
                                      • Size 781B
                                      • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      70x70Logo.scale-100_contrast-white.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\Assets\70x70Logo.scale-100_contrast-white.png
                                      • Size 752B
                                      • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      70x70Logo.scale-140.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\Assets\70x70Logo.scale-140.png
                                      • Size 991B
                                      • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      70x70Logo.scale-140_contrast-white.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\Assets\70x70Logo.scale-140_contrast-white.png
                                      • Size 865B
                                      • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      70x70Logo.scale-180.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\Assets\70x70Logo.scale-180.png
                                      • Size 1KB
                                      • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      70x70Logo.scale-180_contrast-white.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\Assets\70x70Logo.scale-180_contrast-white.png
                                      • Size 1KB
                                      • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      70x70Logo.scale-80.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\Assets\70x70Logo.scale-80.png
                                      • Size 590B
                                      • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      70x70Logo.scale-80_contrast-white.png
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\Assets\70x70Logo.scale-80_contrast-white.png
                                      • Size 519B
                                      • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      assistant_package
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\assistant_package
                                      • Size 3.6MB
                                      • SHA256 a22c9d836d9548a8beb6910280be0f908e57e6f6a6d9b197bd27bd77a11c75c2
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      d3dcompiler_47.dll
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\d3dcompiler_47.dll
                                      • Size 4.5MB
                                      • SHA256 702f4e90e62d67d6562723c9117ff52c0b36b079bbd037ee7b1c67f26083eeec
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      dxcompiler.dll
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\dxcompiler.dll
                                      • Size 24.6MB
                                      • SHA256 3a4c4320c4ea8bfb8cb092daf3b3706a43d117c867ba06e58b3fa4595efece85
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      dxil.dll
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\dxil.dll
                                      • Size 1.5MB
                                      • SHA256 8d5ae0f0c94a0a85af621502642cecae338119e81dcd126a6491bb37562e5de1
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      files_list
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\files_list
                                      • Size 6KB
                                      • SHA256 f4dcf306460892b5da27e01eb19576653afcee96061da32764e25715473928ed
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      headless_command_resources.pak
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\headless_command_resources.pak
                                      • Size 2KB
                                      • SHA256 0a1581aac1329ff89452212f69d661c61f11f8fd96fbe4ecac17549fb8fae65e
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      icudtl.dat
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\icudtl.dat
                                      • Size 10.4MB
                                      • SHA256 f11071c692e85689891070cb6f68120dc1a49941325325f7e5b017af42483e72
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      installer.exe
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\installer.exe
                                      • Size 8.3MB
                                      • SHA256 7c684d6eede066a382bd364341c110c80b6049f4362ac26b8910f4ca35d7a4f3
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      installer_helper_64.exe
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\installer_helper_64.exe
                                      • Size 596KB
                                      • SHA256 fbbb937b2128e0bc0d27bb3032bbfa6e0d7c16723ab1e34cc1c6ce12118376d4
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      libEGL.dll
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\libEGL.dll
                                      • Size 457KB
                                      • SHA256 3b881917835f748b790809c4dd82e0a122cbcb08badb1391dc3e804f65c7202a
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      libGLESv2.dll
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\libGLESv2.dll
                                      • Size 457KB
                                      • SHA256 bb9c7d9ebdf2421364c69649cd6a388ef59fa34adbbddfc615d8f0164bcc6cb1
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      bg.pak
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\localization\bg.pak
                                      • Size 1005KB
                                      • SHA256 2cf5258af1511a2668239fa3db5bea2306bd5baaf7dbc818b880c12674dae0e9
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      bn.pak
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\localization\bn.pak
                                      • Size 1.3MB
                                      • SHA256 2f03be900202d2eb1100e8235a1cc59a5eba12d0279b27ef7c9be2bb3455bd94
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      ca.pak
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\localization\ca.pak
                                      • Size 632KB
                                      • SHA256 9013232717a21be05445d416b30770f227777c6a0345962d33956c73df6d9f53
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      cs.pak
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\localization\cs.pak
                                      • Size 631KB
                                      • SHA256 6e4c44a15a6bb50b819f5f26c6f68f8409df804fcad91fc5872c123072c271a2
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      da.pak
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\localization\da.pak
                                      • Size 581KB
                                      • SHA256 1f6dbe04e54b3bda1177a29fd1da3e3cbe619e9176f41c7150ca62e08f2fa834
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      de.pak
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\localization\de.pak
                                      • Size 629KB
                                      • SHA256 23ae9668e414f7ea891ddf690386144779a640a55ee395f051ddd43545e7104a
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      el.pak
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\localization\el.pak
                                      • Size 1.1MB
                                      • SHA256 f61815f197a50251a450163fc560e068cf162456b9f34604ed052dca0c88d522
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      en-GB.pak
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\135.0.5973.41\localization\en-GB.pak
                                      • Size 510KB
                                      • SHA256 e5f2385d41ba3af095fb2fd06dfa1bccf723564a063794a93f654ce8d673b58c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      installer_prefs.json
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                      • Size 1KB
                                      • SHA256 fd27ffc461495f89590e31b213ef3759c67e42227832ca19f532237cd765c9da
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      opera.exe
                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      • Size 3.0MB
                                      • SHA256 c57d7bbe60d30e57ed593c6a628269e81be7e3a1bd37cfe76b61afa8ac5bba40
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Opera Browser.lnk
                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\8d48b385-2e31-4b08-abcf-db2568844536 Opera Installer Temp\opera_package_202608252355141\Opera Browser.lnk
                                      • Size 1KB
                                      • SHA256 ee2ba269c7044622e8f634f4e3410632dac71554ad786f79f665bfe92828185a
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      additional_file0.tmp
                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\8d48b385-2e31-4b08-abcf-db2568844536 Opera Installer Temp\opera_package_202608252355141\additional_file0.tmp
                                      • Size 2.8MB
                                      • SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      assistant_installer.exe
                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\8d48b385-2e31-4b08-abcf-db2568844536 Opera Installer Temp\opera_package_202608252355141\assistant\assistant_installer.exe
                                      • Size 2.4MB
                                      • SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      dbgcore.dll
                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\8d48b385-2e31-4b08-abcf-db2568844536 Opera Installer Temp\opera_package_202608252355141\assistant\dbgcore.dll
                                      • Size 222KB
                                      • SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      dbghelp.dll
                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\8d48b385-2e31-4b08-abcf-db2568844536 Opera Installer Temp\opera_package_202608252355141\assistant\dbghelp.dll
                                      • Size 1.8MB
                                      • SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      installer_prefs_include.json
                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\8d48b385-2e31-4b08-abcf-db2568844536 Opera Installer Temp\opera_package_202608252355141\installer_prefs_include.json
                                      • Size 239B
                                      • SHA256 ad0a70852936dbf15eeb5accadd7acc1554959df5b85898911e4281e402e287a
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      installer_prefs_include.json
                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\8d48b385-2e31-4b08-abcf-db2568844536 Opera Installer Temp\opera_package_202608252355141\installer_prefs_include.json
                                      • Size 1KB
                                      • SHA256 a62c038278481fdb979d2f34038fb9f32b94801eefb4f9db77530d451e838f4c
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      installer_prefs_include.json.backup
                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\8d48b385-2e31-4b08-abcf-db2568844536 Opera Installer Temp\opera_package_202608252355141\installer_prefs_include.json.backup
                                      • Size 224B
                                      • SHA256 f799101396e58ec98238b81669c288b0649788476fdc997cd029cfd5239c8aad
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      1580e3bb-ac37-43db-8232-fd8d027dc3a6.tmp
                                      • Path C:\Users\Admin\AppData\Local\Temp\1580e3bb-ac37-43db-8232-fd8d027dc3a6.tmp
                                      • Size 13KB
                                      • SHA256 35d78e805a910aad7462893e050376f9d18dbc73c592b4742e6ada87eff3f06b
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      installer.exe
                                      • Path C:\Users\Admin\AppData\Local\Temp\7zS87004BA8\installer.exe
                                      • Size 8.3MB
                                      • SHA256 b5515de1ce3b119be2992df38b1277c6422e2e7c66c8f10c5755ff3fbbfdd24e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      OpInst.exe
                                      • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                      • Size 3.1MB
                                      • SHA256 f666050ca89da3cfee5a8cb2ccf0deebbccadedc5cb12f6b1ea3b933a5c1963c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      bg.png
                                      • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                      • Size 224KB
                                      • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      c5d2d5f3-c881-4940-ade6-f5f717fb4fd0.tmp
                                      • Path C:\Users\Admin\AppData\Local\Temp\c5d2d5f3-c881-4940-ade6-f5f717fb4fd0.tmp
                                      • Size 2.6MB
                                      • SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      ea180a5e-3a75-49c0-90c6-7463bee48952.tmp
                                      • Path C:\Users\Admin\AppData\Local\Temp\ea180a5e-3a75-49c0-90c6-7463bee48952.tmp
                                      • Size 46KB
                                      • SHA256 0443bab24dce89bd68e06dba7f4335db89e70cf99ac92a0919d5df35a2c3cf93
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      favicon_opera_one.png
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3364_2106928316\CRX_INSTALL\favicon_opera_one.png
                                      • Size 2KB
                                      • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      de932af914ba00303d4a2778a383ac9c831101e2.crx
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3364_2106928316\de932af914ba00303d4a2778a383ac9c831101e2.crx
                                      • Size 4.5MB
                                      • SHA256 178de7231e855207b84bb36cbe9a9fbebe1965135352f81ec3036d05cbcdea0d
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Icon_Light_Neutral.png
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5384_385025674\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                      • Size 2KB
                                      • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5676_140949783\CRX_INSTALL\_locales\en\messages.json
                                      • Size 401B
                                      • SHA256 9ad8ffac49958d5bf771eb6f0bd7462b32597696c9d0a45ade771ef8c124b1bb
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5676_140949783\CRX_INSTALL\_locales\en_GB\messages.json
                                      • Size 387B
                                      • SHA256 554cbb0514a7897ebe50043e0de9fabfcf321dcbd3c39e77cb96e62d871c7bc3
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5676_140949783\CRX_INSTALL\_locales\es_419\messages.json
                                      • Size 424B
                                      • SHA256 b04b308252b490b9555e5e002c5c6da63f3a6d517e2f659a626a500467e21100
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      manifest.json
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5676_140949783\CRX_INSTALL\manifest.json
                                      • Size 4KB
                                      • SHA256 dee09929862d037e825b73576a80272b344d7c8e90a3d245a658f5b54486e9d7
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      pipeline.json
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5676_140949783\CRX_INSTALL\source\shaders\pipeline.json
                                      • Size 146B
                                      • SHA256 9e4ae1e22f4ebc23b914d04a4d0cd0b79639dfa609d830b62cc0285dc4a95bba
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      accent.png
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5676_140949783\CRX_INSTALL\wallpaper\color_picker\accent.png
                                      • Size 99KB
                                      • SHA256 0ba039580d11744514f1734bd6ed144bcd8ef605f61b9c4c2fa300a5afae3348
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      background.png
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5676_140949783\CRX_INSTALL\wallpaper\color_picker\background.png
                                      • Size 70KB
                                      • SHA256 44cb4f1b7692d39f251bd2dd24352fff8ce8d9b2bcc47506e642ee4dd3f96f11
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      additional_file2.tmp
                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5676_140949783\additional_file2.tmp
                                      • Size 937KB
                                      • SHA256 73355e09adb2bbb96a8e146e1098ad18036d58353d87f78cf4e6183c1f8fa8a6
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      settings.dat
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                      • Size 40B
                                      • SHA256 966ab4c8d73d66efacd478be28e0af9f7784f4568cc99ffca47669b1ab266cd5
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      50f7596a-1598-47fc-989c-01f43e04baea.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\50f7596a-1598-47fc-989c-01f43e04baea.tmp
                                      • Size 203B
                                      • SHA256 fa9ceb08a03eb809687beb0fd21e86b7d01be6ad902d4cf327b93daa9369ccb3
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      771d70d8-3555-4c1f-a703-1bdb642465a6.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\771d70d8-3555-4c1f-a703-1bdb642465a6.tmp
                                      • Size 456B
                                      • SHA256 ecd056e2e11329c1f0996fa7e0e7a4cbf67402011b8222c2488f7c22461d513e
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      82d448a8-e411-4467-b694-5e28dea274bb.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\82d448a8-e411-4467-b694-5e28dea274bb.tmp
                                      • Size 10KB
                                      • SHA256 9d85531fd43c92d612400e4a8742e1f2359941d0d0ca59f07f27b3fc9a1306b5
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      98ce5337-3942-4cd4-a40b-c140d0375d3a.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\98ce5337-3942-4cd4-a40b-c140d0375d3a.tmp
                                      • Size 6B
                                      • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      Bookmarks
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                      • Size 36KB
                                      • SHA256 536a52c00855c1535894d3a11356a2aa568a51e8f594b1632bbe89229e49ecd2
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      6fe21705-b879-415f-b35e-cc36f450461f.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\6fe21705-b879-415f-b35e-cc36f450461f.tmp
                                      • Size 48B
                                      • SHA256 981f819b9729e6968a0648497d82514bb0ab4fd7292d29c013ec634b97334438
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      the-real-index
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                      • Size 744B
                                      • SHA256 a7276a4b8696973a59522a456dd8380e2bf364487e04b9dd3383bc1cda1d98c9
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      the-real-index
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                      • Size 336B
                                      • SHA256 28c1e54a0f8ca366cbc3c4a55ac78e34a0b000cc811e0fbb896c01a9648658e3
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      the-real-index
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                      • Size 336B
                                      • SHA256 d14f338a8b8b961f4f96c33f7dbcfd764d52a9d49528705ed0521a5087812ce4
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      data_0
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_0
                                      • Size 8KB
                                      • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      data_1
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_1
                                      • Size 264KB
                                      • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      index
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\index
                                      • Size 256KB
                                      • SHA256 963ba6e980313620aa427985f81250e74ae23d3af11a38c8252785599f0dc969
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      data_2
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_2
                                      • Size 8KB
                                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      data_3
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_3
                                      • Size 8KB
                                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      MANIFEST-000001
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
                                      • Size 41B
                                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\bg\messages.json
                                      • Size 580B
                                      • SHA256 f1b238d97566981d936945e64c0066b1d4fd3f6392c16ac0463d3b46fd468714
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\bn\messages.json
                                      • Size 809B
                                      • SHA256 80a4c1efe951aa776823557a3c49b8fcd62af49a14380a318818e3d0fddd214f
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\ca\messages.json
                                      • Size 423B
                                      • SHA256 f94aaf624b73b7969b44341b56e593ffa6deccd92169d1bac059000db337acac
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\cs\messages.json
                                      • Size 407B
                                      • SHA256 2819387ac23ec4550a3778be820522a7fbf0d36d4859c0c057eddb199e4e41d9
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\da\messages.json
                                      • Size 393B
                                      • SHA256 3f9a707d9d1489662efc26127b48b5eaf4df20e32b40b73d4a334b772f0c92c4
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\de\messages.json
                                      • Size 425B
                                      • SHA256 18093b5c5134109d7e7528fa6a92ed1adf36b351fc32f37158bc88064e541a0b
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\el\messages.json
                                      • Size 624B
                                      • SHA256 6f10347307c2d5c1fab911bc6ce07c6edea922bb0ec575cc908bdfd4accbec8d
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\fi\messages.json
                                      • Size 412B
                                      • SHA256 f886a0f236c6741488d6b001717f1b50dc36863365ee42692b3cf36abbc2334e
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\fil\messages.json
                                      • Size 423B
                                      • SHA256 2c5501932616f21b4523f18bbbffff896a16e993b2a482bb8a8961e8d15b20d4
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\fr\messages.json
                                      • Size 435B
                                      • SHA256 6c5b067f98cf71722061022118e825cb753050833c1079c06809c1eb92e68737
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\hi\messages.json
                                      • Size 700B
                                      • SHA256 7ef2c7ab8bb7f1fb2b52901fc7a7f0e09eac95a6ef1bfea818dace4484fdcba7
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\hr\messages.json
                                      • Size 423B
                                      • SHA256 00780fca6c30710c79858b69990c0f6dddc3b2d46cb759202ce66da11c85bb6b
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\hu\messages.json
                                      • Size 440B
                                      • SHA256 c5f9301cd0674e4a184436e5dc26879c980baf66bcf0c201b010e26325ea6e9b
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\id\messages.json
                                      • Size 391B
                                      • SHA256 14f3c6f716b3e99165d5388121f6ed901c1f5acb05420c1573c9e513769bd26b
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\it\messages.json
                                      • Size 427B
                                      • SHA256 50f996c101f2e54fe0f2c88172c259abe05b7705a7b13ff049fd807a4399bb23
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\ja\messages.json
                                      • Size 504B
                                      • SHA256 db19d6d58fb03ce604d9c0840c08707d3948e16682aee6312af2a39d954c7196
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\ko\messages.json
                                      • Size 440B
                                      • SHA256 00b0041d93c2f2760e964a70dc3dfbbe720a3f261bda6e5ff6f052106f4628ad
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\lt\messages.json
                                      • Size 428B
                                      • SHA256 2a53a1eb30e70423e4c146c3ffa96ead6d1f1b154059e8de7ec7a5960f2686d1
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\lv\messages.json
                                      • Size 421B
                                      • SHA256 3b37352b3d148d7295cc0a124da57f7dbac4e98c19c7f31dd8abf2d97726d886
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\ms\messages.json
                                      • Size 401B
                                      • SHA256 0def86e8de9487a64067843a8d672c027fa1b5c59e10cc60e0f08e2128dec96d
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\nl\messages.json
                                      • Size 413B
                                      • SHA256 07962fa5344089532f5eca07d17319610f18b573cf2a0dd24cdef3b3261e6477
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\no\messages.json
                                      • Size 393B
                                      • SHA256 d3c23b53ef4f66d8b8730a570135a9a17f1414a15386b0d007e77287ecb788f3
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\pl\messages.json
                                      • Size 431B
                                      • SHA256 8a5de8af653b76691d07c35ea43c4f30c144982db249f020627cb78d9a9ed4e8
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\pt_BR\messages.json
                                      • Size 419B
                                      • SHA256 b292fb9f8c4a8c733e033fb8f85cc940a8b34cfdc349e7e54a3b8ec13aeac253
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\pt_PT\messages.json
                                      • Size 422B
                                      • SHA256 3baf77d76ae8fbeba0ac863f8e22c7d22084cf254feea227f37736f7a142b068
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\ro\messages.json
                                      • Size 433B
                                      • SHA256 e090811708241a42ab71f0f2e5f94c5a0e55a5d38a9ccacf7e4bd33ed8865574
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\ru\messages.json
                                      • Size 609B
                                      • SHA256 85017824ddfefe0789b0480bced2ae1fe1876c01b3adf7d033a16c6407d90ed6
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\sk\messages.json
                                      • Size 423B
                                      • SHA256 5bf2b036a0036d4bcdcc414d82b33aa83163cb9c8341f884c2648d7fa8aa333a
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\sr\messages.json
                                      • Size 578B
                                      • SHA256 4f724533cdf53b2ed7d49f185a43aa18b34a14170e0d67ebd61d4e745491ea02
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\sv\messages.json
                                      • Size 406B
                                      • SHA256 9bdc0eb2048e133c2410e2352245c5232d85c85db94a9708e493000a02762d22
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\sw\messages.json
                                      • Size 422B
                                      • SHA256 d487bcbfe9f0b6f87617fa6c4db5829d2de348a56417cfdafe310e5cf358c53a
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\ta\messages.json
                                      • Size 778B
                                      • SHA256 22d933c85b88d6b20e6ae9347fff17114320cc47cb4a6231ad88aa71394f6011
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\te\messages.json
                                      • Size 796B
                                      • SHA256 40c84d74e36686384d7adec3363be5b0e5a87809acae39432eddfdbc62e7dbd4
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\th\messages.json
                                      • Size 666B
                                      • SHA256 b80044e94b480c10470c6edf5dd260bd46540493b526130d8b2a03ea8acab41f
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\tr\messages.json
                                      • Size 422B
                                      • SHA256 b262410f023e09dff8b4d81d074b091a73eb394a1db13f13f2878aa0b4f3fa38
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\uk\messages.json
                                      • Size 571B
                                      • SHA256 0bfcebd61e9aaafc456589ce18b73af1fb1d933406bb6f11e2f765c1e3d31f12
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\vi\messages.json
                                      • Size 479B
                                      • SHA256 879d1c47b51ea4bba46e72a57d129331ed3b71cb6a8d545fcf5ee73a2d240840
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\zh_CN\messages.json
                                      • Size 379B
                                      • SHA256 7fd0ceac426fbff6088de114f2e1a238f2d6842de027217525096c674cb17e72
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      messages.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\_locales\zh_TW\messages.json
                                      • Size 379B
                                      • SHA256 25f70a0f5f7f5267b0ee8cd52e233f4b69f82d9cb46a3dc24c169ce4627f5841
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      background.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\background.js
                                      • Size 264B
                                      • SHA256 1eed9d8fb6eb9f836709c8f0866ffa71fd5de7b9df7d1e8da1bb9c2011196e45
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      icon.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\icon.png
                                      • Size 5KB
                                      • SHA256 f355f2b3167c6c63bb570444d5e2db91f08a6903339a48f30e9d8eba233396e5
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      frag.wgsl
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\source\shaders\frag.wgsl
                                      • Size 3KB
                                      • SHA256 a02382715dd48479a3a25186bdf3ccd41279a8ee476d9071ba9212951933a3c4
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      vert.wgsl
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\source\shaders\vert.wgsl
                                      • Size 332B
                                      • SHA256 2cc3a249276241a39f3b82904d56a64ffa9b6eafb0b95385f5a2442f24ce15f7
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      mainTex.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\source\textures\mainTex.png
                                      • Size 139KB
                                      • SHA256 05e915df1184ec1e9f3e6dcb264d25095046b04bcbc8606b3bac61f8e826cb8f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      secTex.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\source\textures\secTex.png
                                      • Size 137KB
                                      • SHA256 6a7c66eef9773ec113aca4d5cd64f3f3aa49d4c534dc14fa985d707396223f2e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      preview.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5676_1584629863\CRX_INSTALL\wallpaper\preview.png
                                      • Size 464KB
                                      • SHA256 c5a2b18b255c6a4029de97ef9d00af6e563b562a2abdbee1e934ff77d5a92c29
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      main.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.7_0\main.js
                                      • Size 46KB
                                      • SHA256 e1b3123f37dfe988a8a22427e98d06cdf472c23429f6277f68c6eeb1626cd54e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      logo_128.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_128.png
                                      • Size 7KB
                                      • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      logo_16.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_16.png
                                      • Size 653B
                                      • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      logo_32.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_32.png
                                      • Size 1KB
                                      • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      logo_48.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_48.png
                                      • Size 2KB
                                      • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      logo_64.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_64.png
                                      • Size 2KB
                                      • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      service-worker-loader.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\service-worker-loader.js
                                      • Size 49B
                                      • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      favicon_opera_one.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.61.0.1_0\favicon_opera_one.png
                                      • Size 2KB
                                      • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      reader_mode.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.61.0.1_0\reader_mode.js
                                      • Size 112KB
                                      • SHA256 af8a91b24637088da1f46285c17f1697365edd15d3e70553b2c1f33a138400b0
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      spotify_frame_interceptor.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.61.0.1_0\spotify_frame_interceptor.js
                                      • Size 5KB
                                      • SHA256 e81ab12e6c536f8c9d64a76be92fcdb63111d241d96974f0472d6751a6f7e3aa
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      background.js
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                                      • Size 86KB
                                      • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Icon_Light_Neutral.png
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                                      • Size 2KB
                                      • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      popup.js.LICENSE.txt
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
                                      • Size 1KB
                                      • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      rules.json
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
                                      • Size 839B
                                      • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      056fe623-4a8e-4e49-bf8e-1a3ddc7ae29a.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\056fe623-4a8e-4e49-bf8e-1a3ddc7ae29a.tmp
                                      • Size 27KB
                                      • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      5547770d-4f54-4ded-8469-9967d13a676e.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\5547770d-4f54-4ded-8469-9967d13a676e.tmp
                                      • Size 27KB
                                      • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      74e82879-a3b1-4e2f-9ae5-61a4ec7d786f.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\74e82879-a3b1-4e2f-9ae5-61a4ec7d786f.tmp
                                      • Size 27KB
                                      • SHA256 b8f0a6164e126d0f70798a96f456487080b5473bee571bb9594600f8a53901c7
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      799650a8-3f5f-4330-91b5-1ba87b5ed2cd.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\799650a8-3f5f-4330-91b5-1ba87b5ed2cd.tmp
                                      • Size 27KB
                                      • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      7c89d74c-db74-4d62-841e-3f0cf42a90b4.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\7c89d74c-db74-4d62-841e-3f0cf42a90b4.tmp
                                      • Size 27KB
                                      • SHA256 9319714069cab7127c1b51d83df80b8e9787901f7c13684b1d84037e8125fd80
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      f2fb9107-a7ee-4890-bc9e-d06054040287.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\f2fb9107-a7ee-4890-bc9e-d06054040287.tmp
                                      • Size 27KB
                                      • SHA256 3a9c655a88437e331f50a23bb40cb1a3de86277cb1a9488c81c426598cfab0a3
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      9ab1f12c-8755-4edb-9bf5-fd7fc76e6173.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\9ab1f12c-8755-4edb-9bf5-fd7fc76e6173.tmp
                                      • Size 61B
                                      • SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Network Persistent State
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                      • Size 111B
                                      • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      e0269606-742d-428f-9cba-4c26e18ce0bc.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\e0269606-742d-428f-9cba-4c26e18ce0bc.tmp
                                      • Size 2B
                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                      • Size 15KB
                                      • SHA256 5cb9ba9bad28576d977736cc03673c6f116f90d307355e48af121a15308aaf21
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                      • Size 11KB
                                      • SHA256 8d9c4cd6847732568167df8e6732066e58945e7c8c77f3b1e45d8398cce7d5c4
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                      • Size 15KB
                                      • SHA256 f6826c026872d1f711da77afca8e1dd5f6d0503fa1092ac44ca19ae427293773
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Secure Preferences
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                      • Size 92KB
                                      • SHA256 1328993fd5d32ce51de5b30ed964196d1eff9ffc07b88cceb32035a13c42ce86
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Secure Preferences
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                      • Size 91KB
                                      • SHA256 6b0e3e43c12b18aab6f451960e5ea57c8395608fdd956bfd7df8f29fe1eb2be1
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Secure Preferences
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                      • Size 116KB
                                      • SHA256 598181c378433988177b0af8965c701434cd37a51e257abb1305776290d2e757
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      105bccb8-e5a2-4c4e-90b9-ab0f728096d2.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\105bccb8-e5a2-4c4e-90b9-ab0f728096d2.tmp
                                      • Size 72B
                                      • SHA256 2d589ba3159854a7f2775a49e380a509c374c7ff2917cf4f07fc102d03b70239
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      9bd52947-442d-4f76-a6cf-742ee3281320.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\9bd52947-442d-4f76-a6cf-742ee3281320.tmp
                                      • Size 72B
                                      • SHA256 aca1f32d681904c343fa83ae61b9a233674b7055499ae201bb981a628e1c974c
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      the-real-index
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                      • Size 96B
                                      • SHA256 9624e44610e1d356b44ec04951f2b7dec351b97bbd557e05528c313e3e540d88
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      the-real-index
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                      • Size 216B
                                      • SHA256 2cb02e5384d8741fda52e252448a3e3abcd9c1b0938c8550b53d07944bffdb18
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      the-real-index
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                      • Size 360B
                                      • SHA256 4ec343e7757a161e47d27e832e7f51ab6b4647c17fa894a6fcbce2232732a441
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      b034444c-bc91-41e6-a658-9a64f12142ae.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\b034444c-bc91-41e6-a658-9a64f12142ae.tmp
                                      • Size 381B
                                      • SHA256 d33c0b43a433aa32c88229464ce9bb91a1104689cec171b842838891b61b9786
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      c1404dc2-4112-48cb-9d4e-26f05695e54f.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\c1404dc2-4112-48cb-9d4e-26f05695e54f.tmp
                                      • Size 381B
                                      • SHA256 b2e5f81308a91d23c07e816439a144e52a8a399bd5a6d006524a7376ff24b9ae
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      e226231e-8c93-4eff-8899-de7d2559d2a9.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\e226231e-8c93-4eff-8899-de7d2559d2a9.tmp
                                      • Size 381B
                                      • SHA256 642c4cd6840c407f432d78e2e4ca8d741da70df104a4be673117ce73f76c05ac
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_25de0802-8d1c-4c9d-b457-5a6ba4902582.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_25de0802-8d1c-4c9d-b457-5a6ba4902582.raw
                                      • Size 941B
                                      • SHA256 466e098ae2e0690be3fc5f25f4d2c00370a58e7b5c321e40d3ecf54a02025ec6
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_25de0802-8d1c-4c9d-b457-5a6ba4902582.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_25de0802-8d1c-4c9d-b457-5a6ba4902582.raw
                                      • Size 957B
                                      • SHA256 e75600dbdd164c700672653a82e2a055d04972e078c7a21b7e7462334726a2ee
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_25de0802-8d1c-4c9d-b457-5a6ba4902582.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_25de0802-8d1c-4c9d-b457-5a6ba4902582.raw
                                      • Size 1KB
                                      • SHA256 15fe13524e44ca741b08bec00ad4cc64ae5b2058307a9e0931aa71183c052866
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_25de0802-8d1c-4c9d-b457-5a6ba4902582.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_25de0802-8d1c-4c9d-b457-5a6ba4902582.raw
                                      • Size 1KB
                                      • SHA256 6e59b60e8adcea2ac0432580db298a64e2e3fde5ade611343cafb1a0df76d0b6
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_25de0802-8d1c-4c9d-b457-5a6ba4902582.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_25de0802-8d1c-4c9d-b457-5a6ba4902582.raw
                                      • Size 493B
                                      • SHA256 59c06dd74e2bc56c9242d46f24ab3d164e608da4ebb7e7962df317f50552200a
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_25de0802-8d1c-4c9d-b457-5a6ba4902582.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_25de0802-8d1c-4c9d-b457-5a6ba4902582.raw
                                      • Size 605B
                                      • SHA256 1db6714602c7ce19a3d8b41a4ecc81b2938797b731e23279a4957a2875fae8da
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_25de0802-8d1c-4c9d-b457-5a6ba4902582.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_25de0802-8d1c-4c9d-b457-5a6ba4902582.raw
                                      • Size 765B
                                      • SHA256 9b1cd497e91839d00d827262b969fa33dead2d36460562c6c5828f6826c58c32
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_25de0802-8d1c-4c9d-b457-5a6ba4902582.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_25de0802-8d1c-4c9d-b457-5a6ba4902582.raw
                                      • Size 1KB
                                      • SHA256 28f33fbf5ee352ce57f6f9a77a076986204bbf70009647a8bcd19a4d56d01814
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_25de0802-8d1c-4c9d-b457-5a6ba4902582.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_25de0802-8d1c-4c9d-b457-5a6ba4902582.raw
                                      • Size 957B
                                      • SHA256 4d09c36242aa0292237131ae446961be41b3b1c0ffc70245241f43dfc7c9a353
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_25de0802-8d1c-4c9d-b457-5a6ba4902582.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_25de0802-8d1c-4c9d-b457-5a6ba4902582.raw
                                      • Size 1KB
                                      • SHA256 29816c6fef1b425788931482d7e6f96a5ef3661fb9e42afb64bc646263d3a28b
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_25de0802-8d1c-4c9d-b457-5a6ba4902582.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_25de0802-8d1c-4c9d-b457-5a6ba4902582.raw
                                      • Size 1KB
                                      • SHA256 f0767b2b0b5446ad1d0730894618de986ccb74969a7c1d79c2dc268f76baba10
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 7KB
                                      • SHA256 da4447d483fb5377a8d1c365707d9c29abb1564c770378dbf9bee3598925b078
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 2KB
                                      • SHA256 1d8841b807e2c5516a8861837a005db967c56d3c7d89e5a5bb2dcdb2a0fbb374
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 7KB
                                      • SHA256 c073cadc067cdc12e7730710a424aab07c17de78c4eb377c654797ed02ce3012
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 1KB
                                      • SHA256 59a9557af2dba48af8a79eb11e2fd26ff2f8e9a68afc681f81db87b7ece832f5
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 8KB
                                      • SHA256 d50ed0f7733b0771031fafbfa6e6d03042781759ab566a1f6bd531cbb09d5615
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 8KB
                                      • SHA256 7ae58264994a35bc71c62d4f2ad216704a711d4422a515b72b7a91452136748c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 11KB
                                      • SHA256 12055ade3ce3e9e4b43830719b38de2ed48dab3522e0ac22ccb05bf0423be0ed
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 11KB
                                      • SHA256 c8df2935ce0742be8efa9487a96b451139ca641d596fce2e86c821944686eee3
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 11KB
                                      • SHA256 27296b541fe905cd35943753fe94428dc85c5c0ebbeaa82b75f031fb3ca8bc3d
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 8KB
                                      • SHA256 32de66528352cab9967de79ec1edcb991484e725a287cc1fdbe7229e306731a8
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 8KB
                                      • SHA256 c0273198b2d757f3766987a46ef4f232d0b464c8d215c58bb91d55875fb553e9
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 8KB
                                      • SHA256 f6d84a794fbf0430a098d325e728aef07a3fb9d6fc9dde462b6d6a5014c78665
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 12KB
                                      • SHA256 042e1addcc0635e362beb58a5959e2bd9b71fa3745b314697bf0595aa59e0f60
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 1KB
                                      • SHA256 e91c746e659113b2cb6d48962279956fbb89b13db32ef82b5e72e9e8887d743a
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 14KB
                                      • SHA256 932ac4a19dfdbdf13697049188e20e5204841aba4d340349d79c3cb8f59f4aec
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 12KB
                                      • SHA256 2d56c7d4e10ffdc0418a8624b69435724b7c63d66993adf2da0fc59bd76aa4bd
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 9KB
                                      • SHA256 566049c2b7b4edc8e18da62a9b5a012e2f9e52d198e906f4e189e2944af3ee45
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 957B
                                      • SHA256 04f215ed3584382f771c4046e83906bc03b74f83aed3557c219b9f381e445bf5
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 1KB
                                      • SHA256 753107a735eb43f8f24f6068e303db0fa2817130805b0b785ebf9a53aa89f093
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 1KB
                                      • SHA256 db25d32d925c81022add837203e4fd4b16bda92aab03a4823c43073a6571b8ad
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 1KB
                                      • SHA256 5dea7ba443e40f329b60fbf84fbac34e4b30deb86687e62195cfb5be08bfba87
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 1KB
                                      • SHA256 a2ec1354bad0d01f611c965d688dc15f8022799fed8c639fa078a2536b2b5512
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 1KB
                                      • SHA256 4068270dfac11be1e8c4b20fae58466f089311602ab2a36fbdde3fcdb50742cc
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 1KB
                                      • SHA256 457ac7db76492c9ddb2c12f5282fba9977c56fabf07741b1ee262c07fa453884
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 1KB
                                      • SHA256 800fb361215d35ef72a2897af1f84be708d2a65a7aaadbcb3ff42e99a953734a
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 9KB
                                      • SHA256 a13a9a9a85b4af2e5e5a184a528a6bcfc99ead80f5b86c928c8cd86478502584
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 9KB
                                      • SHA256 0e5a280c29f7c68109090a652a65b6476bea7e8a61f809debb9069083de56a51
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 9KB
                                      • SHA256 def0adea1a0e38a74af02e6384f9d95ffa1fd5b6aea7fa20a873fb22ebaa55a6
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 9KB
                                      • SHA256 ac8e59117224f1a210bbd1f281ef4e83409803fa9c94e875b7458c268756e9ec
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 9KB
                                      • SHA256 1b85547811bcfcf0434450985724e0a60bd7657cf24a29d63eeb238cf7060b64
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 9KB
                                      • SHA256 944a4cbc3c1ff9e4b1f063b7f9a7bdde943509f89b9d442b4f87c6f789ec1167
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 9KB
                                      • SHA256 eebd284bfd4e93e56e640ae002d9ef55b121ac1bfa5d30d40c8d2b6a6e40733e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 9KB
                                      • SHA256 d35fbc8f063e0cf0d06c14211c61fbbfebd1e7aff9297b8af79cf6fffd89c9fb
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 9KB
                                      • SHA256 cd615936752cfd5585557ce458dc2b3adc8bee37095517d0f24c586927dbc52f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 9KB
                                      • SHA256 9e29fb7bac69b6782e6374a1e591fc832d31d31370f6e4f02017858686951900
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 9KB
                                      • SHA256 f8a294fe0df734e19f0647513449c30da25424c44920b4ab2a6d9922d9474b8a
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 9KB
                                      • SHA256 9aea47861bc3fab621766b183d5887642ff99da6b730fa6b25edf05b4d5ca132
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 9KB
                                      • SHA256 5fde1ca445e546b98187f75c704fe3eb6f3a28368bfda2b58ce4d8654621a682
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 10KB
                                      • SHA256 d0143b11ce2f829e84b8c0dd75b8532543ef94b54106ca00689d1b760948930e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 10KB
                                      • SHA256 8b23d92825a969ed0f963b43c414e8e29ea4ec0c8c2fd7e98620c12dbb8f68d6
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 10KB
                                      • SHA256 f0eeb242775fcb7086ea37c93afe42ed271f1780c65f6763a038d63e9325ab35
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 10KB
                                      • SHA256 12647585dee047855ab093bea01237a4511481a7568882b9af9dce894e7e81ae
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 10KB
                                      • SHA256 eddd7eed1b90da361a6025111643e92b173fbceb09bc4b16a050c20b2e17dd45
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 10KB
                                      • SHA256 98cb9e4c24aaf7ab1fa4ab3cc9599d4d6b7d86bf84398ba6e19d2f03e32c6ba8
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 11KB
                                      • SHA256 d4bac10cf6100fea4f923ba07387e1882aca02ac03f57d68c67958964e1a5656
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 11KB
                                      • SHA256 9e8d09dc7e8d6555b3018fc6cf12f2c4fdc0eeb0480c4be3f4b45e12d234048d
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 909B
                                      • SHA256 ad7ca1fb426652e8e1f4c10375e8795ff24663285bbbdae7c9e21cefcd81a1d7
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 9KB
                                      • SHA256 caf801d988764e7638e25cedc681b5e3e8cf9d321e913e79c14b2c11fa0ce1da
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 1KB
                                      • SHA256 62fac57af1deaf49014692eb1fa85ac0afbb5c66f4f599525aa610a6f22663f8
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 9KB
                                      • SHA256 aaa9fd83fa3197e5e698939418d747941830f7e854f1d49f538430cdc99152a2
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 10KB
                                      • SHA256 0cab590415e24a56a459ea119c00305ef6f9dc22149199e234360da262cdb4ef
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 11KB
                                      • SHA256 8942a3205c72980ef4a63292a571d9474996b1e970c4e210bb55548f7d13a3dc
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 11KB
                                      • SHA256 15577df0bfda0fa7d9bf4fbaa748f72064caee0121dc41f07d1b5530eaff5577
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 12KB
                                      • SHA256 b5aa9c0a1a1e4ac00dec91780005a910c0386ddce2ffc8708263c7157a3678be
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 12KB
                                      • SHA256 04c002aa69195a452020ba42efdea692a8c51307ec344660af21a7c408cfbf47
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 621B
                                      • SHA256 6e2148d52f2580959be806ddcba2e6e1deea6dca998f8720989d8a83b17d1590
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 733B
                                      • SHA256 7c6f1502ea561b91efdb3e50937796b138cf844db16b3dda2e5220d5a08d43b3
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 10KB
                                      • SHA256 2916ec8bf57c6df51d508c4a26f76d487741bd18d5a032188458f5de5098fca8
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 9KB
                                      • SHA256 ce60b6e5920b2390a4ea77ed04f243ced079022c338dfdfc5fc56d145cfaa35a
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 10KB
                                      • SHA256 47e180e354d61d8c3c5362bc9ac5306d59df525b5569ebca2e43730bec1493b8
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 10KB
                                      • SHA256 14a8f1b134ad3a28a4ee3ac350e94a9ec1a6f1130c262a17b601112c870ca619
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 12KB
                                      • SHA256 a4a9dcef3feb97333da3d1134952170da99bc27202ab51738e2370b88b998bd5
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 10KB
                                      • SHA256 2843bf7208ececc3028ed9adc151549844eba1d53ef01c6439c78917a3161698
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 493B
                                      • SHA256 94138a76897cc2a57c05475b56b0980e8c88d7ce8abe9953c871bfad8cc68306
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 9KB
                                      • SHA256 6dcb4c43a62c35cd2cdb43febd4500dc431005a2e26c48418457493db4c6d5c0
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 9KB
                                      • SHA256 7a52a6895cfc3efbd75e90db205d4c1d529737360272113ae464b7195fafcaef
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 12KB
                                      • SHA256 6ef86b660dbfc0c892e5e2163d5112a4ab07ed0d69a6910cfcdfbd77deaca177
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 13KB
                                      • SHA256 63a4ee75066bdff1de6f92234a26dbb65fcd4ba207467c7befb354ad5086e046
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 10KB
                                      • SHA256 c7db6a62fa9c673881e156379f94fad811e4dd9f88fe7d360b18d6ee3960b5f3
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 12KB
                                      • SHA256 637ce1b3e20a26b24eadecbdb40cce70b28bf909c7409f8f7c1a743e62eb47df
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 13KB
                                      • SHA256 7538a5701bc0639fb5be15c44e3d3b3fb3d8005e02d1842cdc9b67a50e6e2afe
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 10KB
                                      • SHA256 24e0f3ec95b184fcb3c3733177dde17a349c32687e5ac2a2851ef551aab39392
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 13KB
                                      • SHA256 fdd9bc6c32dd18e5bd92a7c7e936989fc914ed42132b6e9d2534ef4a5f81fabc
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 13KB
                                      • SHA256 a02734ce367bb9d9f5b74e28143a868fca95f7ee8944f15bfdd6c7b79e1cf1d8
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 13KB
                                      • SHA256 657ad7fc95ce3aa20ae7964ffcfc63f4df819c3ef208e254324b4bb7ce8699da
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 14KB
                                      • SHA256 f9070891233497c468f055af4da33cac0ade670317628a2951198337da9cd241
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5005249a-35f5-4429-95ff-5ef323e19167.raw
                                      • Size 13KB
                                      • SHA256 eb72d558148000d4302c7d40c1793edce55760fcefc71d5cb477181a57f97714
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      session_ef42776c-5cc2-43cf-baeb-293e47a195d9.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ef42776c-5cc2-43cf-baeb-293e47a195d9.raw
                                      • Size 637B
                                      • SHA256 585e1f4b948d1800991d2f36c933d6f424172a62ed8114ca575b46aac76c3268
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_ef42776c-5cc2-43cf-baeb-293e47a195d9.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ef42776c-5cc2-43cf-baeb-293e47a195d9.raw
                                      • Size 621B
                                      • SHA256 f1fae9d8bc82d3a3eee73cc7ab98ee2d30ddd8fb1ac7c8dffcbb363b786b98ed
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_ef42776c-5cc2-43cf-baeb-293e47a195d9.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ef42776c-5cc2-43cf-baeb-293e47a195d9.raw
                                      • Size 493B
                                      • SHA256 92d1346232b0a78bd26b8ac23e20154dd86603b839f53daa910ac2ef154fbba7
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_ef42776c-5cc2-43cf-baeb-293e47a195d9.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ef42776c-5cc2-43cf-baeb-293e47a195d9.raw
                                      • Size 637B
                                      • SHA256 96dbc6ab1ef76cc5a6333e7ab665383b207574f65936d71511a7d30cde852129
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_ef42776c-5cc2-43cf-baeb-293e47a195d9.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ef42776c-5cc2-43cf-baeb-293e47a195d9.raw
                                      • Size 637B
                                      • SHA256 e80add7e35ef88de9a16642e2b5c8bbf626c54308a5fdb6545a855c8669683f5
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_ef42776c-5cc2-43cf-baeb-293e47a195d9.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ef42776c-5cc2-43cf-baeb-293e47a195d9.raw
                                      • Size 797B
                                      • SHA256 314003d5a19e730e414ec45c04ab15ad888dd1f1eaeebac0ceec4049563feacd
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      session_ef42776c-5cc2-43cf-baeb-293e47a195d9.raw
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ef42776c-5cc2-43cf-baeb-293e47a195d9.raw
                                      • Size 845B
                                      • SHA256 28cc48a6c8df9815a95403a47f9ce6d11bde88638be484f5517a16777d44e1bf
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      CURRENT
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\CURRENT
                                      • Size 16B
                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      b9ea8e58-eabc-4185-9e3d-4e1fd8056dbc.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\b9ea8e58-eabc-4185-9e3d-4e1fd8056dbc.tmp
                                      • Size 171B
                                      • SHA256 4a8394445cad361fdf7b39918332d618a6875ac0c0bcf24b319e64a8088d9f28
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      bf0be380-07d3-4a63-be7e-91f3a58f38b6.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\bf0be380-07d3-4a63-be7e-91f3a58f38b6.tmp
                                      • Size 168KB
                                      • SHA256 33378814c3ea64008a0d593273d6844555622564ddf207b93943318b0756f685
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      c83ddc60-e84c-477d-a7c8-a553cbf50513.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\c83ddc60-e84c-477d-a7c8-a553cbf50513.tmp
                                      • Size 203B
                                      • SHA256 353382c95aa16102a2fe7ccf150b514f1bddaf9f92254889d895b8f1d158e2a4
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      d6cedecf-fefd-413f-8d9b-2bd286a8dcd2.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\d6cedecf-fefd-413f-8d9b-2bd286a8dcd2.tmp
                                      • Size 2B
                                      • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      f4cfca0f-980c-43f6-9a26-e81f9f935d5b.tmp
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\f4cfca0f-980c-43f6-9a26-e81f9f935d5b.tmp
                                      • Size 610KB
                                      • SHA256 23f034c2a6098769cea70e41961b95ca5d543aa3fd2766ba6a61877218d1ad57
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      ssdfp3364.0.426714073
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3364.0.426714073
                                      • Size 1KB
                                      • SHA256 99b3e901c0d35f43c2b91fc472f859d62c23d1c5fc173755e8780889adc7b15b
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3364.0.426714073
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3364.0.426714073
                                      • Size 2KB
                                      • SHA256 2f67d0f64767eefbc5484ee829d309dd19b1bf42a332204d14d8556f21532f63
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp3364.0.426714073
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3364.0.426714073
                                      • Size 265B
                                      • SHA256 4230cd0f9e9f335e5d5ed22c1b820e9ec1d260d87199bac096022a9ba3dd0385
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp5384.0.1026379260
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5384.0.1026379260
                                      • Size 549B
                                      • SHA256 23889038cd1bc565eb31216c151d8a75c8121cd01646b43620bc14c2a7274022
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp5384.0.1026379260
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5384.0.1026379260
                                      • Size 1KB
                                      • SHA256 4a9608f1faf912b787af8e4b3c15fdd560fe86432549ffd0f6bd6fc8b15ba5b9
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp5384.0.1026379260
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5384.0.1026379260
                                      • Size 918B
                                      • SHA256 60e7bd402aab14186e66ce823a7aeaf9b6ac83929241065b2c7137e9fe18b7f8
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp5384.0.1026379260
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5384.0.1026379260
                                      • Size 1KB
                                      • SHA256 7725110e93189ba5683dc795caf7822e4b2dd3bb1954c55dc69479307b950733
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp5384.0.1026379260
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5384.0.1026379260
                                      • Size 3KB
                                      • SHA256 328e009e3197c9bd1f3d10ae549ca150efad374558cd17f269705414cd41a23d
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp5384.0.1026379260
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5384.0.1026379260
                                      • Size 1KB
                                      • SHA256 e2391d196c8b901f15e892a56246098bea70c4921a4a169a12e9d75ef323173f
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp5384.0.1026379260
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5384.0.1026379260
                                      • Size 824B
                                      • SHA256 fa92f5a0126a6a67e02d14415a25f323751784fd98ce1f689c26fd03d5c09bdc
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp5384.0.1026379260
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5384.0.1026379260
                                      • Size 1014B
                                      • SHA256 8384943478496d9dfba57f9e63a2ad24db236a3f94ac49cc4105647a617856c1
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp5384.0.1026379260
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5384.0.1026379260
                                      • Size 3KB
                                      • SHA256 49ee150584e8e19a757141234cae4237f9980cde44c594f9021d08ec78fc0280
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp5384.0.1026379260
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5384.0.1026379260
                                      • Size 4KB
                                      • SHA256 892488f1b33214298bffa229562bba694e4e632930433472e973787bbfb698b1
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      ssdfp5384.0.1026379260
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5384.0.1026379260
                                      • Size 4KB
                                      • SHA256 4718c90899fe840dfe0d208009819e6716f01bb3f8a720c23d46402e13194e22
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      ssdfp5384.0.1026379260
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5384.0.1026379260
                                      • Size 4KB
                                      • SHA256 e9067e0e48b8590076f28296b8b5c6f79812433ffb0bd68c62af697aa12b8142
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      ssdfp5384.0.1026379260
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5384.0.1026379260
                                      • Size 4KB
                                      • SHA256 ace8e25eb5d79f263ba3de79bbe24504d2e0350386c66c9ccdc6bb67949487b3
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      ssdfp5384.0.1026379260
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5384.0.1026379260
                                      • Size 737B
                                      • SHA256 93e2a3c2b63f2b087c6b70426605792ecbcfdb08706c91be1fbff74b80a080ac
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp5384.0.1026379260
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5384.0.1026379260
                                      • Size 1KB
                                      • SHA256 ae9e2f78753308e78b39d15229b822f9322bdcb3090ba29d2cdf4a06d1fc259c
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp5384.0.1026379260
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5384.0.1026379260
                                      • Size 4KB
                                      • SHA256 238c1207c028645e5e3e218d7dd862c7e35002aca3ef77cee1b51628d6f03bba
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      ssdfp5384.0.1026379260
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5384.0.1026379260
                                      • Size 1KB
                                      • SHA256 f267aab3092e14d2285e97ed813189796e515f1eb5791b5c27a0fe12c54f318a
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp5384.0.1026379260
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5384.0.1026379260
                                      • Size 1KB
                                      • SHA256 5656deb88357490745718ec416ba17ba4f9efc54398e5a346630d49764489c30
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp5384.0.1026379260
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5384.0.1026379260
                                      • Size 647B
                                      • SHA256 ee5d83ca7bf49af3d5a7faeb91f1ed567acad0d5b2959c9fd64851fa96357175
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp5384.0.1026379260
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5384.0.1026379260
                                      • Size 4KB
                                      • SHA256 476211ab278564a2b29e838bee377ba66e27333ad4081a402d8a346c9d0fd102
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      ssdfp5384.0.1026379260
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5384.0.1026379260
                                      • Size 1KB
                                      • SHA256 cd59af03d1369d6ef44e87473a9697f9eb6753125cbf7ee19ac7b53ade50cc12
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp5384.0.1026379260
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5384.0.1026379260
                                      • Size 2KB
                                      • SHA256 6a2a071a95fc22b896885371a8d816f97b935553472617eec73f6cf4698f8073
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp5384.1.1486882125
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5384.1.1486882125
                                      • Size 200B
                                      • SHA256 f3d32c0fc968e6e84006d408e4b464844bbf8069051e89c31745f3ce735cdf55
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp5676.0.1110827888
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5676.0.1110827888
                                      • Size 265B
                                      • SHA256 57fae175f114a9969303bec5fe6ee32f328a21cda74ca2d1914e204f778f2b19
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp5676.0.1110827888
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5676.0.1110827888
                                      • Size 2KB
                                      • SHA256 3f4ed58c779657eaa1371d3fb262a4b100f8c55019f75b63c8c52402cbad0367
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ssdfp5676.0.1110827888
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5676.0.1110827888
                                      • Size 1KB
                                      • SHA256 3e296c659054092ee38898f85fe0f5a80df5bbbadb800fe7c103885fec9d0510
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Local State
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                      • Size 3KB
                                      • SHA256 ce6c5e883946e53284720cc8073ecd00e52f1f8be7311cc6e0b64fcf50a14d79
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Local State
                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                      • Size 2KB
                                      • SHA256 f23fc77c7438761b708cbee5ef7b2fac7640be0dcb63683ab747f5be9aa04243
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      memory/1308-467-0x00007FF93D3F0000-0x00007FF93D3F1000-memory.dmp
                                      Download

                                      memory/1308-468-0x00007FF93D400000-0x00007FF93D401000-memory.dmp
                                      Download

                                      memory/3364-1289-0x000001CB8A340000-0x000001CB8AA69000-memory.dmp
                                      Download

                                      memory/5212-2990-0x00000218D5E40000-0x00000218D76D8000-memory.dmp
                                      Download

                                      memory/5212-3567-0x00000218D5E40000-0x00000218D76D8000-memory.dmp
                                      Download

                                      memory/5892-2096-0x0000023E54400000-0x0000023E55C98000-memory.dmp
                                      Download