Overview

overview

8

Static

static

8

OperaInstaller.exe

windows10-2004-x64

8

OperaInstaller.exe

windows11-ltsc_2024-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    22/09/2026, 22:17

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaInstaller.exe
  • Size 178KB
  • Sample260922-17ppcage69
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Checks computer location settings 2 TTPs 22 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 4 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 12 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 14 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 4 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 8 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 45 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 21 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 39 IoCs
  • Suspicious use of SendNotifyMessage 46 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe"
    1⤵
    • Downloads MZ/PE file
    • Checks computer location settings
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3252
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:4712
      • C:\Users\Admin\AppData\Local\Temp\7zS8624D269\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS8624D269\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
        3⤵
        • Downloads MZ/PE file
        • Executes dropped EXE
        • Enumerates connected drives
        • Enumerates system info in registry
        • Modifies system certificate store
        • Suspicious use of WriteProcessMemory
        PID:2104
        • C:\Users\Admin\AppData\Local\Temp\7zS8624D269\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS8624D269\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x290,0x294,0x298,0x264,0x29c,0x7ff772e769d8,0x7ff772e769e8,0x7ff772e769f8
          4⤵
          • Executes dropped EXE
          PID:3368
        • C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:2332
        • C:\Users\Admin\AppData\Local\Temp\7zS8624D269\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zS8624D269\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=2104 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\opera_package_20260922231823" --session-guid=961eb7fd-a894-4028-86e8-120c61290895 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=A807000000000000
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Suspicious use of WriteProcessMemory
          PID:3496
          • C:\Users\Admin\AppData\Local\Temp\7zS8624D269\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zS8624D269\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x288,0x28c,0x29c,0x264,0x2a0,0x7ff772e769d8,0x7ff772e769e8,0x7ff772e769f8
            5⤵
            • Executes dropped EXE
            PID:592
          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe" --backend --initial-pid=2104 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\opera_package_202609222318231" --session-guid=961eb7fd-a894-4028-86e8-120c61290895 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=136.0.6008.22
            5⤵
            • Executes dropped EXE
            • Enumerates connected drives
            • Enumerates system info in registry
            • Modifies registry class
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:5552
            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x28c,0x290,0x294,0x268,0x298,0x7ff7290769d8,0x7ff7290769e8,0x7ff7290769f8
              6⤵
              • Executes dropped EXE
              PID:5440
            • C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\opera_package_202609222318231\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\opera_package_202609222318231\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • System Location Discovery: System Language Discovery
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:5148
              • C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\opera_package_202609222318231\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\opera_package_202609222318231\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x240,0x244,0x248,0x21c,0x24c,0x70c9cc,0x70c9d8,0x70c9e4
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:3472
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Enumerates system info in registry
                • Suspicious use of WriteProcessMemory
                PID:3348
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x240,0x244,0x248,0x21c,0x24c,0xa6c9cc,0xa6c9d8,0xa6c9e4
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:5324
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:5388
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:5336
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x244,0x248,0x24c,0x240,0x250,0x7ffdf733ed30,0x7ffdf733ed40,0x7ffdf733ed50
                      10⤵
                      • Executes dropped EXE
                      PID:5600
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:5732
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x23c,0x240,0x244,0x238,0x248,0x7ffdf733ed30,0x7ffdf733ed40,0x7ffdf733ed50
                      10⤵
                      • Executes dropped EXE
                      PID:5924
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x27c,0x280,0x284,0x250,0x288,0x1347324,0x1347330,0x134733c
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:4428
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:5668
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x244,0x248,0x24c,0x23c,0x250,0x7ffdf733ed30,0x7ffdf733ed40,0x7ffdf733ed50
                        11⤵
                        • Executes dropped EXE
                        PID:1924
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:6268
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x23c,0x240,0x244,0x238,0x248,0x7ffdf733ed30,0x7ffdf733ed40,0x7ffdf733ed50
                        11⤵
                        • Executes dropped EXE
                        PID:6320
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:6664
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ffdf733ed30,0x7ffdf733ed40,0x7ffdf733ed50
                        11⤵
                        • Executes dropped EXE
                        PID:6912
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\opera_package_202609222318231\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Program Files directory
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:5664
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ffdf733ed30,0x7ffdf733ed40,0x7ffdf733ed50
                7⤵
                • Executes dropped EXE
                PID:5816
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1732,i,6141649903848105227,2953190727917147776,262144 --field-trial-handle=2148,i,4215073947399799487,4641256740233794192,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,7063029567411976546,15647926923986691256,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2144 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6508
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1912,i,12980493662422932183,15792897254044492160,524288 --field-trial-handle=2148,i,4215073947399799487,4641256740233794192,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,7063029567411976546,15647926923986691256,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2176 /prefetch:3
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Time Discovery
                PID:6516
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2528,i,5378240364877068669,11481076803539812995,524288 --field-trial-handle=2148,i,4215073947399799487,4641256740233794192,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,7063029567411976546,15647926923986691256,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2540 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6628
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3636,i,7142314203289709845,2231740633952718238,2097152 --field-trial-handle=2148,i,4215073947399799487,4641256740233794192,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,7063029567411976546,15647926923986691256,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3640 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:7112
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4344,i,3111433480607318584,11366428426571244840,524288 --field-trial-handle=2148,i,4215073947399799487,4641256740233794192,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,7063029567411976546,15647926923986691256,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=1724 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6484
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4512,i,9234061497787538131,1016038324232294455,2097152 --field-trial-handle=2148,i,4215073947399799487,4641256740233794192,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,7063029567411976546,15647926923986691256,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4612 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6704
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4756,i,16725352500776541959,16636903765668833997,524288 --field-trial-handle=2148,i,4215073947399799487,4641256740233794192,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,7063029567411976546,15647926923986691256,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4780 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:7128
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4256,i,288442795801624182,7681426703300958984,524288 --field-trial-handle=2148,i,4215073947399799487,4641256740233794192,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,7063029567411976546,15647926923986691256,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4956 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:7316
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4964,i,14539622292033262138,1961142937614929342,524288 --field-trial-handle=2148,i,4215073947399799487,4641256740233794192,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,7063029567411976546,15647926923986691256,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4948 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:7916
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\opera_package_202609222318231\additional_file2.tmp"
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Adds Run key to start application
              • Drops file in Program Files directory
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              PID:7800
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ffdf733ed30,0x7ffdf733ed40,0x7ffdf733ed50
                7⤵
                • Executes dropped EXE
                PID:7340
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1956,i,13322939777893865824,5941053778066169197,524288 --field-trial-handle=2148,i,4883945059435820216,16088613900394561,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,12238566934339095201,13839357792465279582,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2188 /prefetch:3
                7⤵
                • Executes dropped EXE
                • System Time Discovery
                • Enumerates system info in registry
                PID:7724
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1748,i,6815532188460796605,9078700735526528660,262144 --field-trial-handle=2148,i,4883945059435820216,16088613900394561,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,12238566934339095201,13839357792465279582,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2144 /prefetch:2
                7⤵
                • Executes dropped EXE
                PID:7860
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2512,i,4696659686777061226,16516798184731765408,524288 --field-trial-handle=2148,i,4883945059435820216,16088613900394561,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,12238566934339095201,13839357792465279582,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2588 /prefetch:8
                7⤵
                • Executes dropped EXE
                PID:8580
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3932,i,9460953805746088094,3391456874380843567,524288 --field-trial-handle=2148,i,4883945059435820216,16088613900394561,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,12238566934339095201,13839357792465279582,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=4036 /prefetch:8
                7⤵
                • Executes dropped EXE
                PID:7540
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3980,i,455596650212430813,2443985221239529277,2097152 --field-trial-handle=2148,i,4883945059435820216,16088613900394561,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,12238566934339095201,13839357792465279582,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4056 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                PID:7896
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4268,i,16506393896208777001,7003613221604287118,2097152 --field-trial-handle=2148,i,4883945059435820216,16088613900394561,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,12238566934339095201,13839357792465279582,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4320 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                PID:8152
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3916,i,3235875290531631887,8188602699012063393,524288 --field-trial-handle=2148,i,4883945059435820216,16088613900394561,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,12238566934339095201,13839357792465279582,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4752 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:8324
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4020,i,619270646596699538,13960475049882599098,524288 --field-trial-handle=2148,i,4883945059435820216,16088613900394561,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,12238566934339095201,13839357792465279582,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4892 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:8516
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4784,i,8563557954940402485,1158148272476610533,524288 --field-trial-handle=2148,i,4883945059435820216,16088613900394561,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,12238566934339095201,13839357792465279582,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4972 /prefetch:8
                7⤵
                  PID:8908
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
                6⤵
                • Checks computer location settings
                • Adds Run key to start application
                • Drops file in Program Files directory
                • Checks processor information in registry
                • Enumerates system info in registry
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                • Suspicious use of AdjustPrivilegeToken
                PID:6316
                • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ffdf733ed30,0x7ffdf733ed40,0x7ffdf733ed50
                  7⤵
                    PID:7008
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2020,i,12347638367088851519,9438274938911259577,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2156 /prefetch:3
                    7⤵
                    • System Time Discovery
                    PID:7160
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1784,i,16606598549518976990,634557415698258991,262144 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2120 /prefetch:2
                    7⤵
                      PID:7120
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2568,i,10889633326862641036,15567260366156804343,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2588 /prefetch:8
                      7⤵
                      • Enumerates system info in registry
                      PID:5376
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3460,i,17338533642276770712,6521427199746219529,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3548 /prefetch:8
                      7⤵
                      • Enumerates system info in registry
                      PID:6652
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3472,i,128971369669491458,1831148086116943511,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3568 /prefetch:8
                      7⤵
                      • Enumerates system info in registry
                      PID:6300
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3520,i,14146917927757171315,6681486875098305624,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3648 /prefetch:8
                      7⤵
                      • Enumerates system info in registry
                      PID:7336
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3496,i,10442044882392714324,2372503147325102121,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3608 /prefetch:8
                      7⤵
                        PID:7596
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3484,i,4337263295691951375,2643483520926744972,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3588 /prefetch:8
                        7⤵
                          PID:1028
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3508,i,14211923389010206102,16620928595319333811,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3628 /prefetch:8
                          7⤵
                          • Enumerates system info in registry
                          PID:8652
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3444,i,15571423919872146493,10072226127781953246,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3528 /prefetch:8
                          7⤵
                          • Enumerates system info in registry
                          PID:2116
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3704,i,15577287989880995992,15593240347467641467,2097152 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4340 /prefetch:1
                          7⤵
                          • Checks computer location settings
                          • Enumerates system info in registry
                          PID:8024
                        • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_gx_splash.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                          7⤵
                          • Modifies registry class
                          • Suspicious use of AdjustPrivilegeToken
                          PID:8048
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4800,i,12697719999042223180,14220015631002217746,2097152 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4828 /prefetch:2
                          7⤵
                          • Checks computer location settings
                          PID:8752
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4980,i,18192140304889260067,16352538604931622254,2097152 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5000 /prefetch:1
                          7⤵
                          • Checks computer location settings
                          PID:8932
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5304,i,4109209474698081346,1689693712330550949,2097152 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5316 /prefetch:1
                          7⤵
                          • Checks computer location settings
                          • Enumerates system info in registry
                          PID:7440
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5456,i,1658494948724369671,3135800821645098077,2097152 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5464 /prefetch:1
                          7⤵
                          • Checks computer location settings
                          • Enumerates system info in registry
                          PID:8392
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6360,i,4019330334832512418,10728605393555621486,2097152 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6524 /prefetch:2
                          7⤵
                          • Checks computer location settings
                          PID:7196
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6796,i,6242319310816430322,13658034181060825515,2097152 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6812 /prefetch:2
                          7⤵
                          • Checks computer location settings
                          • Enumerates system info in registry
                          PID:9044
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6684,i,7939009689785138621,585413044957925134,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6680 /prefetch:8
                          7⤵
                          • Enumerates system info in registry
                          PID:7464
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7152,i,13487287473076600199,8357480004546046509,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=7164 /prefetch:8
                          7⤵
                          • Enumerates system info in registry
                          PID:7320
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5948,i,14424617039006340551,2234162536820276295,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6952 /prefetch:8
                          7⤵
                          • Enumerates system info in registry
                          PID:8580
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7284,i,4465752871339063590,17663814079814458525,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7296 /prefetch:8
                          7⤵
                          • Enumerates system info in registry
                          PID:8064
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7424,i,11775576171672624393,1822093816096726501,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7436 /prefetch:8
                          7⤵
                          • Enumerates system info in registry
                          PID:8748
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7444,i,17861654796474392171,1209259917291625348,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7280 /prefetch:8
                          7⤵
                            PID:8688
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7564,i,11255032562397001164,8935459605911724487,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7688 /prefetch:8
                            7⤵
                            • Enumerates system info in registry
                            PID:7896
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7816,i,313236398937737183,6550013977541749402,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7828 /prefetch:8
                            7⤵
                            • Enumerates system info in registry
                            PID:6876
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8088,i,13094119519455336783,6649389491464217575,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7992 /prefetch:8
                            7⤵
                              PID:9196
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8068,i,2897593675850078665,18301500428974051374,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8164 /prefetch:8
                              7⤵
                              • Enumerates system info in registry
                              PID:7652
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8172,i,1049241576379906519,5923476285836937200,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8312 /prefetch:8
                              7⤵
                                PID:7780
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8320,i,13229172783515887825,9211946508920850958,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8356 /prefetch:8
                                7⤵
                                • Enumerates system info in registry
                                PID:5032
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8484,i,15208131406540601275,10304492730829688617,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8580 /prefetch:8
                                7⤵
                                • Enumerates system info in registry
                                PID:9172
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8592,i,1550858835992873133,16172396052079494693,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8612 /prefetch:8
                                7⤵
                                • Enumerates system info in registry
                                PID:9160
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=8860,i,12735806327312105523,5459925867175429604,2097152 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8872 /prefetch:2
                                7⤵
                                • Checks computer location settings
                                PID:9140
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6544,i,748593809803451439,17388386047388210040,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9052 /prefetch:8
                                7⤵
                                • Enumerates system info in registry
                                PID:9132
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9184,i,12418235714161715583,15807986704727860959,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9204 /prefetch:8
                                7⤵
                                  PID:8488
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9172,i,941470623426879420,13123581677249602980,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9228 /prefetch:8
                                  7⤵
                                  • Enumerates system info in registry
                                  PID:7708
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9484,i,11191280248486682484,12195473561021504481,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=7568 /prefetch:8
                                  7⤵
                                  • Enumerates system info in registry
                                  PID:8796
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9480,i,10036876855561426182,4132152313885632542,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=7648 /prefetch:8
                                  7⤵
                                  • Enumerates system info in registry
                                  PID:8936
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=9624,i,14492527366329018762,14551658052320227971,2097152 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9672 /prefetch:1
                                  7⤵
                                  • Checks computer location settings
                                  • Enumerates system info in registry
                                  PID:4676
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10004,i,17171499553897900764,14288764287689520558,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10000 /prefetch:8
                                  7⤵
                                    PID:6192
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10348,i,5831581304318940087,6334363398198267543,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10332 /prefetch:8
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:7908
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10464,i,15522061555175964758,160524886460839169,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10492 /prefetch:8
                                    7⤵
                                      PID:6296
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9652,i,6560233185609018509,9093517339927965849,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=9644 /prefetch:8
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:9292
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe" --fix-taskbar-pins
                                      7⤵
                                        PID:9548
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
                                          C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x28c,0x290,0x294,0x288,0x264,0x7ff7290769d8,0x7ff7290769e8,0x7ff7290769f8
                                          8⤵
                                            PID:10104
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10908,i,5017503662583803598,9813638694452696549,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=10920 /prefetch:8
                                          7⤵
                                            PID:9584
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                            7⤵
                                              PID:10180
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x7ff737d05598,0x7ff737d055a8,0x7ff737d055b8
                                                8⤵
                                                  PID:7668
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10944,i,5091129768525087242,13523340152885045860,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=10892 /prefetch:8
                                                7⤵
                                                • Enumerates system info in registry
                                                PID:10196
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11168,i,15822872872434715849,1974324677871348859,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11180 /prefetch:8
                                                7⤵
                                                  PID:6672
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=10836,i,1045232667931735458,4683756025596072452,2097152 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=11412 /prefetch:1
                                                  7⤵
                                                  • Checks computer location settings
                                                  PID:5740
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11040,i,3727855190318998265,2684655003409724505,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=11124 /prefetch:8
                                                  7⤵
                                                    PID:9144
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9120,i,8623514419103912809,2254528273059247644,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=10356 /prefetch:8
                                                    7⤵
                                                    • Enumerates system info in registry
                                                    PID:5944
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9028,i,2778378243137279690,11320924971696267931,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=9056 /prefetch:8
                                                    7⤵
                                                      PID:8856
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10540,i,7932822998715238171,7479662749881747761,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=10528 /prefetch:8
                                                      7⤵
                                                        PID:7744
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11328,i,7824824338376132312,11952272039501316466,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=9596 /prefetch:8
                                                        7⤵
                                                        • Enumerates system info in registry
                                                        PID:8656
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8308,i,4332689845131460410,2583595248631628223,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=8056 /prefetch:8
                                                        7⤵
                                                          PID:8232
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11116,i,1073515192972482919,11180344683018088450,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=9620 /prefetch:8
                                                          7⤵
                                                          • Enumerates system info in registry
                                                          PID:6404
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=6544,i,17086914038591511461,3101051470610969102,2097152 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=9376 /prefetch:2
                                                          7⤵
                                                          • Checks computer location settings
                                                          • Enumerates system info in registry
                                                          PID:9528
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9424,i,17728757235837596766,16551722759984153445,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=11368 /prefetch:8
                                                          7⤵
                                                          • Enumerates system info in registry
                                                          PID:9972
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9416,i,6982704052771005150,14245428122090088039,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=11120 /prefetch:8
                                                          7⤵
                                                          • Enumerates system info in registry
                                                          PID:9980
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9452,i,17858865861550729752,2828667819753323477,524288 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=10640 /prefetch:8
                                                          7⤵
                                                            PID:9988
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=8056,i,16733772187920571241,6404264786393932553,2097152 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=10556 /prefetch:2
                                                            7⤵
                                                            • Checks computer location settings
                                                            PID:5628
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=8292,i,6150296035418954863,14373059017141860233,2097152 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=9028 /prefetch:2
                                                            7⤵
                                                            • Checks computer location settings
                                                            PID:7896
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=8292,i,908880985913773156,12359930676490220861,2097152 --field-trial-handle=2124,i,14273534609002874041,9724640629370100906,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,6281050080458726193,2997727975727583028,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=9140 /prefetch:2
                                                            7⤵
                                                            • Checks computer location settings
                                                            PID:7744
                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\opera_package_202609222318231\assistant\Assistant_136.0.6008.22_Setup.exe_sfx.exe
                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\opera_package_202609222318231\assistant\Assistant_136.0.6008.22_Setup.exe_sfx.exe"
                                                      4⤵
                                                      • Executes dropped EXE
                                                      • System Location Discovery: System Language Discovery
                                                      PID:5036
                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\opera_package_202609222318231\assistant\assistant_installer.exe
                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\opera_package_202609222318231\assistant\assistant_installer.exe" --version
                                                      4⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • System Location Discovery: System Language Discovery
                                                      • Enumerates system info in registry
                                                      • Suspicious use of WriteProcessMemory
                                                      PID:4440
                                                      • C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\opera_package_202609222318231\assistant\assistant_installer.exe
                                                        "C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\opera_package_202609222318231\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x70c9cc,0x70c9d8,0x70c9e4
                                                        5⤵
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        • System Location Discovery: System Language Discovery
                                                        PID:2752
                                              • C:\Windows\System32\rundll32.exe
                                                C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                1⤵
                                                  PID:4072
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                  1⤵
                                                  • Checks processor information in registry
                                                  • Modifies data under HKEY_USERS
                                                  • Modifies registry class
                                                  • Suspicious behavior: EnumeratesProcesses
                                                  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                  • Suspicious use of AdjustPrivilegeToken
                                                  • Suspicious use of FindShellTrayWindow
                                                  • Suspicious use of SendNotifyMessage
                                                  • Suspicious use of WriteProcessMemory
                                                  PID:2416
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffe1a05c728,0x7ffe1a05c734,0x7ffe1a05c740
                                                    2⤵
                                                      PID:1768
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1944,i,2459451789033672281,2738483533682690224,524288 --field-trial-handle=2180,i,17783058027871202877,17762278216007307144,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2204 /prefetch:3
                                                      2⤵
                                                      • System Time Discovery
                                                      PID:2216
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,9042691031543970758,18348305478657995449,262144 --field-trial-handle=2180,i,17783058027871202877,17762278216007307144,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2044 /prefetch:2
                                                      2⤵
                                                        PID:4764
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2280,i,1113297651849179500,9485272109623208283,524288 --field-trial-handle=2180,i,17783058027871202877,17762278216007307144,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2584 /prefetch:8
                                                        2⤵
                                                          PID:2876
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3256,i,1721932219314004156,12980562664848611726,2097152 --field-trial-handle=2180,i,17783058027871202877,17762278216007307144,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3268 /prefetch:1
                                                          2⤵
                                                            PID:4560
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3276,i,2239015517993012496,14219111892045691321,2097152 --field-trial-handle=2180,i,17783058027871202877,17762278216007307144,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3296 /prefetch:1
                                                            2⤵
                                                              PID:3388
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4600,i,16266675600375611261,13665468080531012756,2097152 --field-trial-handle=2180,i,17783058027871202877,17762278216007307144,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3968 /prefetch:1
                                                              2⤵
                                                                PID:5188
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5604,i,11871817925914708321,17780885627289358817,524288 --field-trial-handle=2180,i,17783058027871202877,17762278216007307144,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5624 /prefetch:8
                                                                2⤵
                                                                  PID:5420
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5780,i,10202977239227628133,5574661914098127288,524288 --field-trial-handle=2180,i,17783058027871202877,17762278216007307144,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5804 /prefetch:8
                                                                  2⤵
                                                                    PID:1144
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5788,i,17989511512266186139,5218710594116150930,524288 --field-trial-handle=2180,i,17783058027871202877,17762278216007307144,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5608 /prefetch:8
                                                                    2⤵
                                                                      PID:4828
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5304,i,6007057348336671842,9499083094258585472,524288 --field-trial-handle=2180,i,17783058027871202877,17762278216007307144,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5860 /prefetch:8
                                                                      2⤵
                                                                        PID:7708
                                                                    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                      1⤵
                                                                        PID:4124
                                                                      • C:\Windows\system32\svchost.exe
                                                                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                        1⤵
                                                                          PID:5532
                                                                        • C:\Windows\SysWOW64\DllHost.exe
                                                                          C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
                                                                          1⤵
                                                                          • System Location Discovery: System Language Discovery
                                                                          • Suspicious use of SetWindowsHookEx
                                                                          PID:6068
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                          C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                          1⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          • System Location Discovery: System Language Discovery
                                                                          • Suspicious use of FindShellTrayWindow
                                                                          • Suspicious use of SendNotifyMessage
                                                                          • Suspicious use of WriteProcessMemory
                                                                          PID:5448
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                            2⤵
                                                                            • Executes dropped EXE
                                                                            • Loads dropped DLL
                                                                            • Suspicious use of WriteProcessMemory
                                                                            PID:5636
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                              C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ffdf733ed30,0x7ffdf733ed40,0x7ffdf733ed50
                                                                              3⤵
                                                                              • Executes dropped EXE
                                                                              PID:5660
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                            2⤵
                                                                            • Executes dropped EXE
                                                                            • Loads dropped DLL
                                                                            • Suspicious use of WriteProcessMemory
                                                                            PID:5876
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                              C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x244,0x248,0x24c,0x240,0x250,0x7ffdf733ed30,0x7ffdf733ed40,0x7ffdf733ed50
                                                                              3⤵
                                                                              • Executes dropped EXE
                                                                              PID:4116
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x26c,0x270,0x274,0x220,0x278,0x1347324,0x1347330,0x134733c
                                                                            2⤵
                                                                            • Executes dropped EXE
                                                                            • Loads dropped DLL
                                                                            • System Location Discovery: System Language Discovery
                                                                            • Suspicious use of WriteProcessMemory
                                                                            PID:4940
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                              3⤵
                                                                              • Executes dropped EXE
                                                                              • Loads dropped DLL
                                                                              • Suspicious use of WriteProcessMemory
                                                                              PID:1232
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ffdf733ed30,0x7ffdf733ed40,0x7ffdf733ed50
                                                                                4⤵
                                                                                • Executes dropped EXE
                                                                                PID:4924
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                              3⤵
                                                                              • Executes dropped EXE
                                                                              • Loads dropped DLL
                                                                              • Suspicious use of WriteProcessMemory
                                                                              PID:6176
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x234,0x238,0x23c,0x230,0x240,0x7ffdf733ed30,0x7ffdf733ed40,0x7ffdf733ed50
                                                                                4⤵
                                                                                • Executes dropped EXE
                                                                                PID:6204
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                              3⤵
                                                                              • Executes dropped EXE
                                                                              • Loads dropped DLL
                                                                              • Enumerates system info in registry
                                                                              • Suspicious use of WriteProcessMemory
                                                                              PID:6368
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ffdf733ed30,0x7ffdf733ed40,0x7ffdf733ed50
                                                                                4⤵
                                                                                • Executes dropped EXE
                                                                                PID:6468
                                                                        • C:\Windows\system32\wbem\unsecapp.exe
                                                                          C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                          1⤵
                                                                            PID:6700
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                                                            1⤵
                                                                            • Executes dropped EXE
                                                                            • Loads dropped DLL
                                                                            • Suspicious use of WriteProcessMemory
                                                                            PID:7508
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                              C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x23c,0x240,0x244,0x238,0x248,0x7ffdf733ed30,0x7ffdf733ed40,0x7ffdf733ed50
                                                                              2⤵
                                                                              • Executes dropped EXE
                                                                              PID:8128
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"
                                                                            1⤵
                                                                            • Executes dropped EXE
                                                                            PID:7900
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                              C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x234,0x238,0x23c,0x230,0x240,0x7ffdf733ed30,0x7ffdf733ed40,0x7ffdf733ed50
                                                                              2⤵
                                                                              • Executes dropped EXE
                                                                              PID:8100
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                                            1⤵
                                                                              PID:10168
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x278,0x27c,0x280,0x210,0x284,0x7ff737d05598,0x7ff737d055a8,0x7ff737d055b8
                                                                                2⤵
                                                                                  PID:2712
                                                                                • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                                                  2⤵
                                                                                    PID:7784

                                                                                Network

                                                                                      MITRE ATT&CK Enterprise v16

                                                                                      Reconnaissance

                                                                                      Resource Development

                                                                                      Initial Access

                                                                                      Execution

                                                                                      Persistence

                                                                                      Boot or Logon Autostart Execution

                                                                                      1
                                                                                      T1547

                                                                                      Registry Run Keys / Startup Folder

                                                                                      1
                                                                                      T1547.001

                                                                                      Event Triggered Execution

                                                                                      1
                                                                                      T1546

                                                                                      Component Object Model Hijacking

                                                                                      1
                                                                                      T1546.015

                                                                                      Privilege Escalation

                                                                                      Boot or Logon Autostart Execution

                                                                                      1
                                                                                      T1547

                                                                                      Registry Run Keys / Startup Folder

                                                                                      1
                                                                                      T1547.001

                                                                                      Event Triggered Execution

                                                                                      1
                                                                                      T1546

                                                                                      Component Object Model Hijacking

                                                                                      1
                                                                                      T1546.015

                                                                                      Defense Evasion

                                                                                      Modify Registry

                                                                                      3
                                                                                      T1112

                                                                                      Subvert Trust Controls

                                                                                      1
                                                                                      T1553

                                                                                      Install Root Certificate

                                                                                      1
                                                                                      T1553.004

                                                                                      Credential Access

                                                                                      Credentials from Password Stores

                                                                                      1
                                                                                      T1555

                                                                                      Credentials from Web Browsers

                                                                                      1
                                                                                      T1555.003

                                                                                      Unsecured Credentials

                                                                                      1
                                                                                      T1552

                                                                                      Credentials In Files

                                                                                      1
                                                                                      T1552.001

                                                                                      Discovery

                                                                                      Browser Information Discovery

                                                                                      1
                                                                                      T1217

                                                                                      Peripheral Device Discovery

                                                                                      1
                                                                                      T1120

                                                                                      Query Registry

                                                                                      6
                                                                                      T1012

                                                                                      System Information Discovery

                                                                                      5
                                                                                      T1082

                                                                                      System Location Discovery

                                                                                      1
                                                                                      T1614

                                                                                      System Language Discovery

                                                                                      1
                                                                                      T1614.001

                                                                                      System Time Discovery

                                                                                      1
                                                                                      T1124

                                                                                      Lateral Movement

                                                                                      Collection

                                                                                      Data from Local System

                                                                                      1
                                                                                      T1005

                                                                                      Command and Control

                                                                                      Exfiltration

                                                                                      Impact

                                                                                      Replay Monitor

                                                                                      Loading Replay Monitor...

                                                                                      Downloads

                                                                                      opera-one-dark.jpg
                                                                                      • Path C:\Program Files\scoped_dir6316_1253113335\opera-one-dark.jpg
                                                                                      • Size 349KB
                                                                                      • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      persona.ini
                                                                                      • Path C:\Program Files\scoped_dir6316_1253113335\persona.ini
                                                                                      • Size 217B
                                                                                      • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      opera-one.jpg
                                                                                      • Path C:\Program Files\scoped_dir6316_388263875\opera-one.jpg
                                                                                      • Size 194KB
                                                                                      • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      persona.ini
                                                                                      • Path C:\Program Files\scoped_dir6316_388263875\persona.ini
                                                                                      • Size 207B
                                                                                      • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                      • Size 471B
                                                                                      • SHA256 98fc90154e052468232e5d7a37fcdd1df140759063ebe1ac0135cac266bd8dc2
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                      • Size 416B
                                                                                      • SHA256 6fbb22fd64a9bee738ccbc2ee0751b7ae988ccc28c5a50b73040d008bf035786
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      BookmarkMergedSurfaceOrdering
                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                      • Size 6B
                                                                                      • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                      • MD5 SHA1 SHA512
                                                                                      Submit Download

                                                                                      BrowsingTopicsState
                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                      • Size 649B
                                                                                      • SHA256 85e44d86a291af6b8a0773760d98d0b32cc22efbcf0b2e108f77bdcaf0e8cde0
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      Network Persistent State
                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                      • Size 3KB
                                                                                      • SHA256 eca746043397c5b9f2362f4f66e22b9a9e076484cec6cebd751de6b16094fa22
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      SCT Auditing Pending Reports
                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                      • Size 2B
                                                                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                      • MD5 SHA1 SHA512
                                                                                      Submit Download

                                                                                      Preferences
                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                      • Size 11KB
                                                                                      • SHA256 2e9b1451a6a59d8130a2985cc2737cf69ef69ace87c52e2a6e1bb97e1231878d
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      Preferences
                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                      • Size 11KB
                                                                                      • SHA256 1867e72e9f24eb9ad3374dae24bb054638e43fdd6e22929040dd4bb56596f64b
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      Preferences
                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                      • Size 12KB
                                                                                      • SHA256 ee6a28c567071155913edb14455ca5483bac01e3406b26d40af5fed8cd7624ad
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      Secure Preferences
                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                      • Size 13KB
                                                                                      • SHA256 cbff59adc7b520f0de2985ad921ee12da5b00aa0aaadd64b2862a8b11ece7f19
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      Local State
                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                      • Size 130KB
                                                                                      • SHA256 e821d950058370779e3d6415e65bb6a508d355b7d44fd10cf5bf32c85818f1bb
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      Local State
                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                      • Size 261KB
                                                                                      • SHA256 bb5743ebefee1fb866447d64a4f645e75eb8d4794fbdbb23c0bef8017af42054
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      Local State
                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                      • Size 261KB
                                                                                      • SHA256 6a559dbdc3327273e6ad8c78fa0829b1313a7ba3eb50f46da98e5c96c6abc375
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      Local State
                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                      • Size 262KB
                                                                                      • SHA256 011e000cbec1b08796b80ead60fe4dc43c5f068a3cb273dd58d6190ea4198fab
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      data_0
                                                                                      • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_0
                                                                                      • Size 44KB
                                                                                      • SHA256 a8a53aa541f9a1916723dd4bb838fc893be125fd9bf8eb65f63f5b61cf839d01
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      136.0.6008.22.manifest
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\136.0.6008.22.manifest
                                                                                      • Size 225B
                                                                                      • SHA256 f7cf7f8bc1e2a84858fc169d027458c9fa565afdc94ac9f58891f39667e05960
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      150x150Logo.scale-100.png
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-100.png
                                                                                      • Size 1KB
                                                                                      • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      150x150Logo.scale-100_contrast-white.png
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                      • Size 1KB
                                                                                      • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      150x150Logo.scale-140.png
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-140.png
                                                                                      • Size 1KB
                                                                                      • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      150x150Logo.scale-140_contrast-white.png
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-140_contrast-white.png
                                                                                      • Size 1KB
                                                                                      • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      150x150Logo.scale-180.png
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-180.png
                                                                                      • Size 1KB
                                                                                      • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      150x150Logo.scale-180_contrast-white.png
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-180_contrast-white.png
                                                                                      • Size 1KB
                                                                                      • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      150x150Logo.scale-80.png
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-80.png
                                                                                      • Size 827B
                                                                                      • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      150x150Logo.scale-80_contrast-white.png
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-80_contrast-white.png
                                                                                      • Size 799B
                                                                                      • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      70x70Logo.scale-100.png
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-100.png
                                                                                      • Size 781B
                                                                                      • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      70x70Logo.scale-100_contrast-white.png
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-100_contrast-white.png
                                                                                      • Size 752B
                                                                                      • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      70x70Logo.scale-140.png
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-140.png
                                                                                      • Size 991B
                                                                                      • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      70x70Logo.scale-140_contrast-white.png
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-140_contrast-white.png
                                                                                      • Size 865B
                                                                                      • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      70x70Logo.scale-180.png
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-180.png
                                                                                      • Size 1KB
                                                                                      • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      70x70Logo.scale-180_contrast-white.png
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-180_contrast-white.png
                                                                                      • Size 1KB
                                                                                      • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      70x70Logo.scale-80.png
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-80.png
                                                                                      • Size 590B
                                                                                      • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      70x70Logo.scale-80_contrast-white.png
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-80_contrast-white.png
                                                                                      • Size 519B
                                                                                      • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      assistant_package
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\assistant_package
                                                                                      • Size 3.6MB
                                                                                      • SHA256 ac451192b285e40a67ab2e34f97ff86d65ee7a1f3ce1c86f048ca1c990e11331
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      d3dcompiler_47.dll
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\d3dcompiler_47.dll
                                                                                      • Size 4.5MB
                                                                                      • SHA256 a89eedc60219e5f2d35f94573945c0a3c045cfc48270624d06ef9dae7c359257
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      dxcompiler.dll
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\dxcompiler.dll
                                                                                      • Size 24.6MB
                                                                                      • SHA256 7a553cb8cf74a12b673dd7dd9acc21bee22cbaed39b8a53fbab059f48edf1e4e
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      dxil.dll
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\dxil.dll
                                                                                      • Size 1.5MB
                                                                                      • SHA256 c7083c71cacaa9bcf0a1b686f56186cdfe41fdb1be39ab50e1c48d579870a67d
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      files_list
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\files_list
                                                                                      • Size 6KB
                                                                                      • SHA256 153ba8d7191054c8eb8b180a8f5b5b1c8dc47d0c642331beb8919a67e922e3e9
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      headless_command_resources.pak
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\headless_command_resources.pak
                                                                                      • Size 2KB
                                                                                      • SHA256 90e398ef08a0178d1efd373addb5070a551011be8b9d27fcc2f234e430a8ad98
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      icudtl.dat
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\icudtl.dat
                                                                                      • Size 10.4MB
                                                                                      • SHA256 f11071c692e85689891070cb6f68120dc1a49941325325f7e5b017af42483e72
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      installer.exe
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
                                                                                      • Size 8.0MB
                                                                                      • SHA256 3a7cd7023d780aee3c44e7502e0446807abf3f3558e1074f001e7dada324ec7a
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      installer_helper_64.exe
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer_helper_64.exe
                                                                                      • Size 601KB
                                                                                      • SHA256 29dd2e3874384d8f1cd61ef6dcba97e2ddd4a426e8a203f683126add0b557b31
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      libEGL.dll
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\libEGL.dll
                                                                                      • Size 460KB
                                                                                      • SHA256 6f2448fa8553806457b2842fcd9045b68255b201ab901bcfdb9f0d3e9801443d
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      libGLESv2.dll
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\libGLESv2.dll
                                                                                      • Size 460KB
                                                                                      • SHA256 d972d13ddca8f0a7c8c39a1f79ce092232caca9ec74e56afaffa4cbdc7254399
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      bg.pak
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\localization\bg.pak
                                                                                      • Size 1021KB
                                                                                      • SHA256 7958eea00f4ef14a9b3a9021b87ae4cdace36ca171d6487e09427c980925066a
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      bn.pak
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\localization\bn.pak
                                                                                      • Size 1.3MB
                                                                                      • SHA256 6307636ac68ea9742dba9dcafd1a6cba2c086be46c25fc10c9392a083f67a763
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      installer_prefs.json
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                                                                      • Size 1KB
                                                                                      • SHA256 b1cd12bd0c2460225b68c3f170d8d6e9e2188ecf6b1935e064d725cb6216e1d2
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      opera.exe
                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      • Size 3.4MB
                                                                                      • SHA256 1287544e37d6364852070e0481ba9f207926e3a08a152ce9140d52954b919c8f
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      Opera Browser.lnk
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\opera_package_202609222318231\Opera Browser.lnk
                                                                                      • Size 1KB
                                                                                      • SHA256 6ec6d45adb437df927393ff78e6ae2c0d94e5c70dc08a982fd3c7f5f3274d621
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      additional_file0.tmp
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\opera_package_202609222318231\additional_file0.tmp
                                                                                      • Size 2.9MB
                                                                                      • SHA256 3f73fcad3e4341457014e2d3b6f2d8897626292ab63bcfbed20cc9156bc5059f
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      assistant_installer.exe
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\opera_package_202609222318231\assistant\assistant_installer.exe
                                                                                      • Size 2.4MB
                                                                                      • SHA256 7759a3f4d694115a391420ae1ca24edeafe6f02ee4fc2dee9937d8a4b804a608
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      dbgcore.dll
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\opera_package_202609222318231\assistant\dbgcore.dll
                                                                                      • Size 196KB
                                                                                      • SHA256 e7e395f28ceb05ed3519970190ec4f72a7489609acd1401fb6b41582cc1dcc3e
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      dbghelp.dll
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\opera_package_202609222318231\assistant\dbghelp.dll
                                                                                      • Size 1.8MB
                                                                                      • SHA256 27dde9b1136e5c13cc16b7cfa8945a9a9f7508ad91f124961eabed06b2886c4b
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      installer_prefs_include.json
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\opera_package_202609222318231\installer_prefs_include.json
                                                                                      • Size 239B
                                                                                      • SHA256 ad0a70852936dbf15eeb5accadd7acc1554959df5b85898911e4281e402e287a
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      installer_prefs_include.json
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\opera_package_202609222318231\installer_prefs_include.json
                                                                                      • Size 1KB
                                                                                      • SHA256 67cfe789695ec828cf896259172b6276511a8593ff85f23bc9d425536806d859
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      installer_prefs_include.json.backup
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\5123ff0c-6dcc-46dd-892a-3040d02a8104 Opera Installer Temp\opera_package_202609222318231\installer_prefs_include.json.backup
                                                                                      • Size 224B
                                                                                      • SHA256 f799101396e58ec98238b81669c288b0649788476fdc997cd029cfd5239c8aad
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      installer.exe
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\7zS8624D269\installer.exe
                                                                                      • Size 8.0MB
                                                                                      • SHA256 7c9c1c49c414174606f75b1a24d4c5b0b1db84fa522d06e827d9d32e3d2e0e93
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      OpInst.exe
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                                                                      • Size 2.8MB
                                                                                      • SHA256 408a4399577defb1cb9ba673ba3c6de004ecc0335170085aeea4b4c2a126d83b
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      bg.png
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                                                                      • Size 224KB
                                                                                      • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      favicon_opera_one.png
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5664_1378808883\CRX_INSTALL\favicon_opera_one.png
                                                                                      • Size 2KB
                                                                                      • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      manifest.json
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5664_1378808883\CRX_INSTALL\manifest.json
                                                                                      • Size 3KB
                                                                                      • SHA256 edf3f7c95ebed10cfa1c14b63a306a176d05ca454a0c334064e13bbdbb9c919c
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      service_worker.js
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5664_1378808883\CRX_INSTALL\service_worker.js
                                                                                      • Size 92KB
                                                                                      • SHA256 e4a71cc9098780c7cd5ba8a5ebfdf9d3d281a5710ed3b596b6c751d2886cd8eb
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5664_1378808883\de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                                                      • Size 4.6MB
                                                                                      • SHA256 e81986014a4fb55c0aa220745d2433c51ad29166b32693de8911784dd3920584
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      44fbf01f-6c84-4330-a215-44f58aca74d9.tmp
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6316_1057207224\44fbf01f-6c84-4330-a215-44f58aca74d9.tmp
                                                                                      • Size 13KB
                                                                                      • SHA256 ce8adf970c3290b7ea94c85727c5abe7eb232e16026a1f8f876ad7f3ec03573d
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      manifest.json
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6316_1920745541\CRX_INSTALL\manifest.json
                                                                                      • Size 1KB
                                                                                      • SHA256 20379f015b210e6dafac6fdc64b8faa3b2f8a66b0124f7d5d4e3a83b728802d9
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      76a318a4-e4cd-4d38-bf04-b5bde744af50.tmp
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6316_285525590\76a318a4-e4cd-4d38-bf04-b5bde744af50.tmp
                                                                                      • Size 2.6MB
                                                                                      • SHA256 19bc35ca347a6560c0183e56da6bee3353737e78aa9eff9111c5ebd897b0cfd5
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      Icon_Light_Neutral.png
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6316_285525590\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                                      • Size 2KB
                                                                                      • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      90996008-f7d6-460f-b80b-cdeaeffd9d41.tmp
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6316_983692457\90996008-f7d6-460f-b80b-cdeaeffd9d41.tmp
                                                                                      • Size 46KB
                                                                                      • SHA256 0443bab24dce89bd68e06dba7f4335db89e70cf99ac92a0919d5df35a2c3cf93
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7800_1064030174\CRX_INSTALL\_locales\en\messages.json
                                                                                      • Size 401B
                                                                                      • SHA256 9ad8ffac49958d5bf771eb6f0bd7462b32597696c9d0a45ade771ef8c124b1bb
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7800_1064030174\CRX_INSTALL\_locales\en_GB\messages.json
                                                                                      • Size 387B
                                                                                      • SHA256 554cbb0514a7897ebe50043e0de9fabfcf321dcbd3c39e77cb96e62d871c7bc3
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7800_1064030174\CRX_INSTALL\_locales\es_419\messages.json
                                                                                      • Size 424B
                                                                                      • SHA256 b04b308252b490b9555e5e002c5c6da63f3a6d517e2f659a626a500467e21100
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      manifest.json
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7800_1064030174\CRX_INSTALL\manifest.json
                                                                                      • Size 4KB
                                                                                      • SHA256 dee09929862d037e825b73576a80272b344d7c8e90a3d245a658f5b54486e9d7
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      pipeline.json
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7800_1064030174\CRX_INSTALL\source\shaders\pipeline.json
                                                                                      • Size 146B
                                                                                      • SHA256 9e4ae1e22f4ebc23b914d04a4d0cd0b79639dfa609d830b62cc0285dc4a95bba
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      accent.png
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7800_1064030174\CRX_INSTALL\wallpaper\color_picker\accent.png
                                                                                      • Size 99KB
                                                                                      • SHA256 0ba039580d11744514f1734bd6ed144bcd8ef605f61b9c4c2fa300a5afae3348
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      background.png
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7800_1064030174\CRX_INSTALL\wallpaper\color_picker\background.png
                                                                                      • Size 70KB
                                                                                      • SHA256 44cb4f1b7692d39f251bd2dd24352fff8ce8d9b2bcc47506e642ee4dd3f96f11
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      additional_file2.tmp
                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7800_1064030174\additional_file2.tmp
                                                                                      • Size 937KB
                                                                                      • SHA256 73355e09adb2bbb96a8e146e1098ad18036d58353d87f78cf4e6183c1f8fa8a6
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      settings.dat
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                                      • Size 40B
                                                                                      • SHA256 3d1733177067c6506ee7876b59940a4270cd98490e0a921e93bfe5864157b90d
                                                                                      • MD5 SHA1 SHA512
                                                                                      Submit Download

                                                                                      2c301c18-f37b-4540-ae42-0fdee79615a0.tmp
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\2c301c18-f37b-4540-ae42-0fdee79615a0.tmp
                                                                                      • Size 203B
                                                                                      • SHA256 79866ddca0b17ebe0f78fb0e922296025797721b20a1d26e1d7be78ca4472c0f
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      85cf162f-45a1-4bab-9256-36e50601496c.tmp
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\85cf162f-45a1-4bab-9256-36e50601496c.tmp
                                                                                      • Size 456B
                                                                                      • SHA256 6d25762f0750237cbf1e53288fd385cf4eb97c5c09e655c3be2aa2093dd5bcc1
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      Bookmarks
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                                                                      • Size 36KB
                                                                                      • SHA256 7c6e3c1a620d94ea4e5d2d2a597c89c6033594bf87bc0968002d03d837e30c81
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      BookmarksExtras
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                                                                                      • Size 167KB
                                                                                      • SHA256 636992a49f7addc1c3165231685ab77cf5b60f7176fc45d33b8da4f310d72aef
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      BookmarksExtras0a6c9cbf-b443-49e5-be99-bf65070718ca.tmp
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras0a6c9cbf-b443-49e5-be99-bf65070718ca.tmp
                                                                                      • Size 2B
                                                                                      • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                      • MD5 SHA1 SHA512
                                                                                      Submit Download

                                                                                      the-real-index
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                      • Size 48B
                                                                                      • SHA256 81a563d587eea30e63c11aef0716714e6790d0e747ef4fe065fe8725c060bb77
                                                                                      • MD5 SHA1 SHA512
                                                                                      Submit Download

                                                                                      the-real-index
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                      • Size 336B
                                                                                      • SHA256 d4f1632b75761d4cda2c1255c1fc8e4c2b080fe1f1efda82aeffe69e83c81db9
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      the-real-index
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                      • Size 336B
                                                                                      • SHA256 dc5a8ea628baf040eb502d8dcd042fa49071aebdf672ffec81c1a7b0efd7b56a
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      the-real-index
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                      • Size 744B
                                                                                      • SHA256 7ff9fc74c4197a2530aaa6f77add42242b6c59559a0a5b991f8260e312bfa289
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      data_2
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_2
                                                                                      • Size 8KB
                                                                                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                      Submit Download

                                                                                      data_3
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_3
                                                                                      • Size 8KB
                                                                                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                      Submit Download

                                                                                      000001.dbtmp
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\000001.dbtmp
                                                                                      • Size 16B
                                                                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                      • MD5 SHA1 SHA512
                                                                                      Submit Download

                                                                                      MANIFEST-000001
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
                                                                                      • Size 41B
                                                                                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                      • MD5 SHA1 SHA512
                                                                                      Submit Download

                                                                                      reader_mode.js
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5664_859729442\CRX_INSTALL\reader_mode.js
                                                                                      • Size 112KB
                                                                                      • SHA256 17f8a5c1d70acee668cc6964317d88802d4409c32b0d7e292b95e1de8ddb16df
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      spotify_frame_interceptor.js
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5664_859729442\CRX_INSTALL\spotify_frame_interceptor.js
                                                                                      • Size 5KB
                                                                                      • SHA256 895ef6ae0efde6f5e8af23d1acbfac4a5351bda31c89d2e64c05f2de0181dd56
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\bg\messages.json
                                                                                      • Size 580B
                                                                                      • SHA256 f1b238d97566981d936945e64c0066b1d4fd3f6392c16ac0463d3b46fd468714
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\bn\messages.json
                                                                                      • Size 809B
                                                                                      • SHA256 80a4c1efe951aa776823557a3c49b8fcd62af49a14380a318818e3d0fddd214f
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\ca\messages.json
                                                                                      • Size 423B
                                                                                      • SHA256 f94aaf624b73b7969b44341b56e593ffa6deccd92169d1bac059000db337acac
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\cs\messages.json
                                                                                      • Size 407B
                                                                                      • SHA256 2819387ac23ec4550a3778be820522a7fbf0d36d4859c0c057eddb199e4e41d9
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\da\messages.json
                                                                                      • Size 393B
                                                                                      • SHA256 3f9a707d9d1489662efc26127b48b5eaf4df20e32b40b73d4a334b772f0c92c4
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\de\messages.json
                                                                                      • Size 425B
                                                                                      • SHA256 18093b5c5134109d7e7528fa6a92ed1adf36b351fc32f37158bc88064e541a0b
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\el\messages.json
                                                                                      • Size 624B
                                                                                      • SHA256 6f10347307c2d5c1fab911bc6ce07c6edea922bb0ec575cc908bdfd4accbec8d
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\fi\messages.json
                                                                                      • Size 412B
                                                                                      • SHA256 f886a0f236c6741488d6b001717f1b50dc36863365ee42692b3cf36abbc2334e
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\fil\messages.json
                                                                                      • Size 423B
                                                                                      • SHA256 2c5501932616f21b4523f18bbbffff896a16e993b2a482bb8a8961e8d15b20d4
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\fr\messages.json
                                                                                      • Size 435B
                                                                                      • SHA256 6c5b067f98cf71722061022118e825cb753050833c1079c06809c1eb92e68737
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\hi\messages.json
                                                                                      • Size 700B
                                                                                      • SHA256 7ef2c7ab8bb7f1fb2b52901fc7a7f0e09eac95a6ef1bfea818dace4484fdcba7
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\hr\messages.json
                                                                                      • Size 423B
                                                                                      • SHA256 00780fca6c30710c79858b69990c0f6dddc3b2d46cb759202ce66da11c85bb6b
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\hu\messages.json
                                                                                      • Size 440B
                                                                                      • SHA256 c5f9301cd0674e4a184436e5dc26879c980baf66bcf0c201b010e26325ea6e9b
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\id\messages.json
                                                                                      • Size 391B
                                                                                      • SHA256 14f3c6f716b3e99165d5388121f6ed901c1f5acb05420c1573c9e513769bd26b
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\it\messages.json
                                                                                      • Size 427B
                                                                                      • SHA256 50f996c101f2e54fe0f2c88172c259abe05b7705a7b13ff049fd807a4399bb23
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\ja\messages.json
                                                                                      • Size 504B
                                                                                      • SHA256 db19d6d58fb03ce604d9c0840c08707d3948e16682aee6312af2a39d954c7196
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\ko\messages.json
                                                                                      • Size 440B
                                                                                      • SHA256 00b0041d93c2f2760e964a70dc3dfbbe720a3f261bda6e5ff6f052106f4628ad
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\lt\messages.json
                                                                                      • Size 428B
                                                                                      • SHA256 2a53a1eb30e70423e4c146c3ffa96ead6d1f1b154059e8de7ec7a5960f2686d1
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\lv\messages.json
                                                                                      • Size 421B
                                                                                      • SHA256 3b37352b3d148d7295cc0a124da57f7dbac4e98c19c7f31dd8abf2d97726d886
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\ms\messages.json
                                                                                      • Size 401B
                                                                                      • SHA256 0def86e8de9487a64067843a8d672c027fa1b5c59e10cc60e0f08e2128dec96d
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\nl\messages.json
                                                                                      • Size 413B
                                                                                      • SHA256 07962fa5344089532f5eca07d17319610f18b573cf2a0dd24cdef3b3261e6477
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\no\messages.json
                                                                                      • Size 393B
                                                                                      • SHA256 d3c23b53ef4f66d8b8730a570135a9a17f1414a15386b0d007e77287ecb788f3
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\pl\messages.json
                                                                                      • Size 431B
                                                                                      • SHA256 8a5de8af653b76691d07c35ea43c4f30c144982db249f020627cb78d9a9ed4e8
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\pt_BR\messages.json
                                                                                      • Size 419B
                                                                                      • SHA256 b292fb9f8c4a8c733e033fb8f85cc940a8b34cfdc349e7e54a3b8ec13aeac253
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\ro\messages.json
                                                                                      • Size 433B
                                                                                      • SHA256 e090811708241a42ab71f0f2e5f94c5a0e55a5d38a9ccacf7e4bd33ed8865574
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\ru\messages.json
                                                                                      • Size 609B
                                                                                      • SHA256 85017824ddfefe0789b0480bced2ae1fe1876c01b3adf7d033a16c6407d90ed6
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\sk\messages.json
                                                                                      • Size 423B
                                                                                      • SHA256 5bf2b036a0036d4bcdcc414d82b33aa83163cb9c8341f884c2648d7fa8aa333a
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\sr\messages.json
                                                                                      • Size 578B
                                                                                      • SHA256 4f724533cdf53b2ed7d49f185a43aa18b34a14170e0d67ebd61d4e745491ea02
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\sv\messages.json
                                                                                      • Size 406B
                                                                                      • SHA256 9bdc0eb2048e133c2410e2352245c5232d85c85db94a9708e493000a02762d22
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\sw\messages.json
                                                                                      • Size 422B
                                                                                      • SHA256 d487bcbfe9f0b6f87617fa6c4db5829d2de348a56417cfdafe310e5cf358c53a
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\ta\messages.json
                                                                                      • Size 778B
                                                                                      • SHA256 22d933c85b88d6b20e6ae9347fff17114320cc47cb4a6231ad88aa71394f6011
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\te\messages.json
                                                                                      • Size 796B
                                                                                      • SHA256 40c84d74e36686384d7adec3363be5b0e5a87809acae39432eddfdbc62e7dbd4
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\th\messages.json
                                                                                      • Size 666B
                                                                                      • SHA256 b80044e94b480c10470c6edf5dd260bd46540493b526130d8b2a03ea8acab41f
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\tr\messages.json
                                                                                      • Size 422B
                                                                                      • SHA256 b262410f023e09dff8b4d81d074b091a73eb394a1db13f13f2878aa0b4f3fa38
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\uk\messages.json
                                                                                      • Size 571B
                                                                                      • SHA256 0bfcebd61e9aaafc456589ce18b73af1fb1d933406bb6f11e2f765c1e3d31f12
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\vi\messages.json
                                                                                      • Size 479B
                                                                                      • SHA256 879d1c47b51ea4bba46e72a57d129331ed3b71cb6a8d545fcf5ee73a2d240840
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\zh_CN\messages.json
                                                                                      • Size 379B
                                                                                      • SHA256 7fd0ceac426fbff6088de114f2e1a238f2d6842de027217525096c674cb17e72
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\_locales\zh_TW\messages.json
                                                                                      • Size 379B
                                                                                      • SHA256 25f70a0f5f7f5267b0ee8cd52e233f4b69f82d9cb46a3dc24c169ce4627f5841
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      background.js
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\background.js
                                                                                      • Size 264B
                                                                                      • SHA256 1eed9d8fb6eb9f836709c8f0866ffa71fd5de7b9df7d1e8da1bb9c2011196e45
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      icon.png
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\icon.png
                                                                                      • Size 5KB
                                                                                      • SHA256 f355f2b3167c6c63bb570444d5e2db91f08a6903339a48f30e9d8eba233396e5
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      frag.wgsl
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\source\shaders\frag.wgsl
                                                                                      • Size 3KB
                                                                                      • SHA256 a02382715dd48479a3a25186bdf3ccd41279a8ee476d9071ba9212951933a3c4
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      vert.wgsl
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\source\shaders\vert.wgsl
                                                                                      • Size 332B
                                                                                      • SHA256 2cc3a249276241a39f3b82904d56a64ffa9b6eafb0b95385f5a2442f24ce15f7
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      mainTex.png
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\source\textures\mainTex.png
                                                                                      • Size 139KB
                                                                                      • SHA256 05e915df1184ec1e9f3e6dcb264d25095046b04bcbc8606b3bac61f8e826cb8f
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      secTex.png
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\source\textures\secTex.png
                                                                                      • Size 137KB
                                                                                      • SHA256 6a7c66eef9773ec113aca4d5cd64f3f3aa49d4c534dc14fa985d707396223f2e
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      preview.png
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir7800_2002217584\CRX_INSTALL\wallpaper\preview.png
                                                                                      • Size 464KB
                                                                                      • SHA256 c5a2b18b255c6a4029de97ef9d00af6e563b562a2abdbee1e934ff77d5a92c29
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      messages.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\bckiheihmdiaaoadimffbjbjafkoooaj\1.0.4_0\_locales\pt_PT\messages.json
                                                                                      • Size 422B
                                                                                      • SHA256 3baf77d76ae8fbeba0ac863f8e22c7d22084cf254feea227f37736f7a142b068
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      main.js
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.8_0\main.js
                                                                                      • Size 47KB
                                                                                      • SHA256 9cc5e1dd96d76735499257c52d632a0a9e17ed4da929035067dadcc586000335
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      manifest.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.8_1\manifest.json
                                                                                      • Size 1KB
                                                                                      • SHA256 a34bc0307423ba5a3fbba7762f1425e4ab37f9155954b282a3e6b5e3b9335d87
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      logo_128.png
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_128.png
                                                                                      • Size 7KB
                                                                                      • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      logo_16.png
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_16.png
                                                                                      • Size 653B
                                                                                      • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      logo_32.png
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_32.png
                                                                                      • Size 1KB
                                                                                      • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      logo_48.png
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_48.png
                                                                                      • Size 2KB
                                                                                      • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      logo_64.png
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_64.png
                                                                                      • Size 2KB
                                                                                      • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      service-worker-loader.js
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\service-worker-loader.js
                                                                                      • Size 49B
                                                                                      • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                                                      • MD5 SHA1 SHA512
                                                                                      Submit Download

                                                                                      favicon_opera_one.png
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\favicon_opera_one.png
                                                                                      • Size 2KB
                                                                                      • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      background.js
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\background.js
                                                                                      • Size 87KB
                                                                                      • SHA256 b199d4f989c63947c53a9d07450038cfe274b7a10e8cc7d688c4049ae14ef63e
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      Icon_Light_Neutral.png
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Neutral.png
                                                                                      • Size 2KB
                                                                                      • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      popup.js.LICENSE.txt
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\popup.js.LICENSE.txt
                                                                                      • Size 1KB
                                                                                      • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      rules.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\rules.json
                                                                                      • Size 839B
                                                                                      • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      1451a4df-96ca-443d-8c12-63a8a137a6e4.tmp
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\1451a4df-96ca-443d-8c12-63a8a137a6e4.tmp
                                                                                      • Size 27KB
                                                                                      • SHA256 3a9c655a88437e331f50a23bb40cb1a3de86277cb1a9488c81c426598cfab0a3
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      2d23cdb9-d6dc-4566-b022-d325b7ace0f6.tmp
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\2d23cdb9-d6dc-4566-b022-d325b7ace0f6.tmp
                                                                                      • Size 27KB
                                                                                      • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      75b9b2ba-c531-4ac9-bd3f-012278d3a047.tmp
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\75b9b2ba-c531-4ac9-bd3f-012278d3a047.tmp
                                                                                      • Size 27KB
                                                                                      • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      75c0a744-5d65-4593-8779-21c12904acaa.tmp
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\75c0a744-5d65-4593-8779-21c12904acaa.tmp
                                                                                      • Size 27KB
                                                                                      • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      bdc4c5c9-fc2f-4b21-80db-3779d2943e63.tmp
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\bdc4c5c9-fc2f-4b21-80db-3779d2943e63.tmp
                                                                                      • Size 27KB
                                                                                      • SHA256 7aca076b4b1dccb2457284a51bddb5c43eacf93224ec1f9aedcdefb1fbc9b087
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      d439e03e-763d-41e8-9fcc-8db6ce9c1355.tmp
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\d439e03e-763d-41e8-9fcc-8db6ce9c1355.tmp
                                                                                      • Size 27KB
                                                                                      • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      Network Persistent State
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                                      • Size 61B
                                                                                      • SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      Network Persistent State748f87d0-5879-419c-906f-3d84e95c0ea3.tmp
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State748f87d0-5879-419c-906f-3d84e95c0ea3.tmp
                                                                                      • Size 111B
                                                                                      • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      Preferences
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                      • Size 11KB
                                                                                      • SHA256 ffd95be6a29d905183bc2a599178e5586400b45749abee9954380a9e93495b19
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      Preferences
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                      • Size 15KB
                                                                                      • SHA256 8e5db47422ad71c4bb78e8e16fd8dcea0978074e7d3dd7f0ee6a8877b7f9ab7e
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      Preferences
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                      • Size 15KB
                                                                                      • SHA256 21d4c8e05ccd4c4f7ade41a4cc63b887685afafaed65678997249e8e48bedb1e
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      Preferences77563769-e83c-4ca1-9455-029b20e5fe1c.tmp
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences77563769-e83c-4ca1-9455-029b20e5fe1c.tmp
                                                                                      • Size 10KB
                                                                                      • SHA256 c0a368a7b6171678351eef5972450602323817c7e541ea953eaf85b9a770e71e
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      Secure Preferences
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                      • Size 114KB
                                                                                      • SHA256 f58aa180380ad0f060f1fa734b09b867e5eb4ea40a11d1a256bf859119fce715
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      Secure Preferences
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                      • Size 85KB
                                                                                      • SHA256 c663ec645bf8be949084ae0b0c8820b663e53749d8cd41a9c90fe1854ba2209b
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      Secure Preferences
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                      • Size 86KB
                                                                                      • SHA256 7ac2ac562f3f35e7bcd2265e6df3fbeb3afbc74dea92f717041aa52909fd331c
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      42ae3791-5380-4d5e-a9af-a0a112578e4a.tmp
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\42ae3791-5380-4d5e-a9af-a0a112578e4a.tmp
                                                                                      • Size 72B
                                                                                      • SHA256 f97aefc449e16a051224b1270c53c0e10ad67dab86c8011685ef3a17e25ef7f5
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      the-real-index
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                      • Size 120B
                                                                                      • SHA256 a2492c4d9c7fd1a3a60de09e1bfb0b9a6755e17fb9688c8d8cfb21914c211733
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      the-real-index
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                      • Size 216B
                                                                                      • SHA256 13ad98d1e720fe44ed31d2743f6aff355acaab4cbe4c926cee5bb966a7d2f75c
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      the-real-index
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                      • Size 360B
                                                                                      • SHA256 89caa27653672b89383dfbc4fe1abb957f2bd0bb8eada2d1b5197041580c3933
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      411455f2-0a92-4f54-80e2-70c8a2b3e89a.tmp
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\411455f2-0a92-4f54-80e2-70c8a2b3e89a.tmp
                                                                                      • Size 381B
                                                                                      • SHA256 9343926c2ba0fe6c0892556434aa4e093df5db43f04483ea43a8d76347b87458
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      8f32681f-1671-4a00-a86b-675be856143c.tmp
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\8f32681f-1671-4a00-a86b-675be856143c.tmp
                                                                                      • Size 381B
                                                                                      • SHA256 2ec93cd881b4719e87688dc92e640dbda185a4340c8b6f4cf90c089f56dafe2b
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      e2a60dc5-e4b8-4701-995c-fcfe646f2fea.tmp
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\e2a60dc5-e4b8-4701-995c-fcfe646f2fea.tmp
                                                                                      • Size 381B
                                                                                      • SHA256 1c6645561ace5d10b063911bb269d3f444d2dd3bcdb79c4ed67d4b5f2f6f6fd1
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_0691191c-c963-4caa-bf18-0455dc4fce35.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0691191c-c963-4caa-bf18-0455dc4fce35.raw
                                                                                      • Size 493B
                                                                                      • SHA256 655b5bfe42d8bdd8d720c770a72cb861f35ba28dbf3b40aa27e3f177eaf57a00
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_0691191c-c963-4caa-bf18-0455dc4fce35.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0691191c-c963-4caa-bf18-0455dc4fce35.raw
                                                                                      • Size 621B
                                                                                      • SHA256 4885ac13267d4670c438dccf7e82bc09a2565cc0a287f5ef58a978170031da07
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_0691191c-c963-4caa-bf18-0455dc4fce35.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0691191c-c963-4caa-bf18-0455dc4fce35.raw
                                                                                      • Size 637B
                                                                                      • SHA256 ade270abd0a577b1aa48c1ccadce8753a2b50397f882b31fe76d753d166eab08
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_0691191c-c963-4caa-bf18-0455dc4fce35.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0691191c-c963-4caa-bf18-0455dc4fce35.raw
                                                                                      • Size 637B
                                                                                      • SHA256 5fbb841d7caa8e0fcdd81f8dc5dc21b91a1600734e3b08984ef9f0be683cca0e
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_0691191c-c963-4caa-bf18-0455dc4fce35.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0691191c-c963-4caa-bf18-0455dc4fce35.raw
                                                                                      • Size 637B
                                                                                      • SHA256 1f4e8222c2af4ea6e2948733f7912a15fb23595aecdd754fe43d2f5d5133f897
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_0691191c-c963-4caa-bf18-0455dc4fce35.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0691191c-c963-4caa-bf18-0455dc4fce35.raw
                                                                                      • Size 845B
                                                                                      • SHA256 1feb5ff0994352531a722a9f0a47dcbcfb00c2f0ba53f47c884eb5fd87bda6ff
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_0691191c-c963-4caa-bf18-0455dc4fce35.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0691191c-c963-4caa-bf18-0455dc4fce35.raw
                                                                                      • Size 797B
                                                                                      • SHA256 bb7a3a87883ec3ff1de628b9240d595623603aa51b317635c1a7cebbe38c14d2
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 13KB
                                                                                      • SHA256 af8ad6d876543a0f9770adcb633dbf65b734a099e657c0c7812db2c5b854b5bd
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 11KB
                                                                                      • SHA256 e112475773a181b5019a00fe056c83481a6ccf4d72064a3510c49726554ab11d
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 13KB
                                                                                      • SHA256 5661b7677faa5c3bde4d5078bdae15e17d97c0d47fd1c1fc7947385ff464e886
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 14KB
                                                                                      • SHA256 b161a939919b4aff370873fa340d305484e7718748fbc2e9d95c725f6140b77c
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 11KB
                                                                                      • SHA256 d431ba8498b5a62806024ee58bfa823b8e1628fd9cbce2049fe863d618a1140f
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 11KB
                                                                                      • SHA256 046d7ccc675b7b26d051ba85f57d851713457f72e6813344945905bea318c5e8
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 14KB
                                                                                      • SHA256 dee0fe65c2f1683dceb6ead04dcc1e65f3ab0e13616e3f9898ac3ddd57a708dd
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 493B
                                                                                      • SHA256 42cc1a773e9ae9c50c4847d4d1033f67568e27434bb04ca451e8dad321299be6
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 621B
                                                                                      • SHA256 2b68a072393373b0bd5a3209c793afb974fdc73eadb5fe5614f1f2ba68e44f8f
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 11KB
                                                                                      • SHA256 25448ab1c54864af6868ceb8fd46b1f5a44ec46864042963e823a83b4a77159c
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 11KB
                                                                                      • SHA256 082bedc61c370468859d149982d52a4c1fc2a3b3d9e903abacd802bd627df54d
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 11KB
                                                                                      • SHA256 f712e6ba5406ef2a431b7729cbb34df5fe0ebe5df61d9c39b4e45f25c13bd057
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 3KB
                                                                                      • SHA256 f771c9c49600536535191a590c82118ababc2cba81fedb4c93455b68d1b9610b
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 733B
                                                                                      • SHA256 c5ab69f7335dc2fa23eae01edb45115d9a39fabb11c8e92d7a130fa0c746575d
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 1KB
                                                                                      • SHA256 663b5550feca31b474ec4b286aa8d42adfe71271df7d08c9e2bfafa9aada8e4f
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 1KB
                                                                                      • SHA256 b794956c783195cfc124a088861212a47018e5e69a2fffa29eda36e824f53f9d
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 3KB
                                                                                      • SHA256 8e69cd5cf192073f7fa5180aadafb7c0f2691c9e85326537edae3f70c0470f39
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 9KB
                                                                                      • SHA256 b3fc9df6991deb14d1898b41206f3057f50589347924d2d6758dd8ab6df50f8c
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 10KB
                                                                                      • SHA256 2cd6a54fc639fe52345b776dcb65591a856f28bfabf70bbf641fef8a27a6dc0e
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 10KB
                                                                                      • SHA256 1ad7a118ecaa34f380ab0b07651ffa18614ff63f8d140e1c34bc6baec39ffe7e
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 10KB
                                                                                      • SHA256 545f4e6877300c5b818fa8695b8158b949af0de848c143e4d784db2230e433d8
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 12KB
                                                                                      • SHA256 f760bdf5f296442c9a2325256aa40677bdf5256af7d22562aa63bf41937d8604
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 8KB
                                                                                      • SHA256 346806693e54dc50af986c190859c3ffb89ca737cf522810ecb88dfe10f30676
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 10KB
                                                                                      • SHA256 fbd56e097f3e071fb926d30f969070e7ba3779b06f43beef74a9c6a1c692cc70
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 925B
                                                                                      • SHA256 e7e62c0943328e14d7eb4a3a1d7e2362d78213958a26ec6bb90057d061723518
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 9KB
                                                                                      • SHA256 6a6611bfcbb36a1643c3bfe49cfd84c8628cd3e801349737e30bbfa5441392c1
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 1KB
                                                                                      • SHA256 2165352865018b10e5049fbe6604fc7aac87ef16f0b5e376644ee879ff702b26
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 1KB
                                                                                      • SHA256 cc1a592b9b7ed2bae34a66ba3677ce1234e6b82cd9470c45b7d6a29b4d1fb29a
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 1KB
                                                                                      • SHA256 f50b13b23a512883a35587ff3cfad12008c61f23e6659eb1e46cda09f7fc8cb5
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 1KB
                                                                                      • SHA256 ec95aedd2ad1037884d7909b1623371ab0237e2a99f2befbd2ca1b00dde7036b
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 1KB
                                                                                      • SHA256 c118d2df0cff986e0cb42a33949538b40ae25b3b475a1d7f935f968ceb6747c7
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 2KB
                                                                                      • SHA256 a2d6611e444994c2f6b384e5ce980dc9e92038346bac8ce502b16cc517ebba25
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 2KB
                                                                                      • SHA256 4fb1ad785e26a0ee20cdf49c725d90d014db415cbe6c06243bb3a8fa5cd75986
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 9KB
                                                                                      • SHA256 d62385dac51a386e3d58d0ae7dcca7f2910132377b8159eda905955cf30f2a64
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 9KB
                                                                                      • SHA256 388977e536ab870fbe640cea76cf772d701aaf6e9d77b59fe38528c4b46bf35d
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 9KB
                                                                                      • SHA256 b0e8884c1305d3714502be0cf1948cd3bbe9f07d4d89a75c93ff5b5d22c1a592
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 9KB
                                                                                      • SHA256 ca55664145c1a165d967b6b7849100331e0844d06c67271989f8d3aae6eaea34
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 9KB
                                                                                      • SHA256 0df5c87fcc48a9dc9c1a0e97f3a62223ad3ba86ef67c72f7319bce0f8a0eee10
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 9KB
                                                                                      • SHA256 e98650ae92a048f07ff6eab5d8f11d3b82b427a0b32a2dc908873151033c6e2d
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 9KB
                                                                                      • SHA256 9406cbda5a02d9fbb6d35175a2630cc62c861a7d2a3db758de020f2263d23feb
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 9KB
                                                                                      • SHA256 c78de43631a0c4c5a41efa970187546afbb0f12dcfc194c38cb3ec29e73ee0e0
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 9KB
                                                                                      • SHA256 eded2315b0d41e09a52ff5b3ee4f29609b7946ae62043cdbdf6082146a15e7c7
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 9KB
                                                                                      • SHA256 c3eb4adb296b84e10d20093502d7d0b035b5f4756315803c5f62ca4cfc476d17
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 9KB
                                                                                      • SHA256 438bf2c8a12c613277e36b74876b6b30a1831672e159d0be813cdd80d51225de
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 9KB
                                                                                      • SHA256 be9af53f36448d09da6b17022bf1bb8c7cbd1e763638383f9e0daf64e3776e04
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 9KB
                                                                                      • SHA256 1850f73d40af27056ad31a3caad7afb53ef430bc1c98ca8cdd17eda78e2a9691
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 9KB
                                                                                      • SHA256 4ec80aff0612dfafb1e0c2c1cbfde8924c471ded60e17c6e1ad3bfec912cb8f8
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 9KB
                                                                                      • SHA256 726f71bcd9aeeb52e9f276d0e14e2433d9b2c0a8421b27fa780738e3b5b0f371
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 9KB
                                                                                      • SHA256 11684bd773674d8f81b1b89c2ccf381bbd3dc8281fe35cae1d2638c82c520e23
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 9KB
                                                                                      • SHA256 8e8e2b6d142376836390b287f191e254d6a3e10dffe7c64c43386c172d4f3d89
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 9KB
                                                                                      • SHA256 8d9a40375c35ca94a2869a7d9635eaaafd7698bce33f34c86f25f412553cbb60
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 10KB
                                                                                      • SHA256 3406f204d4090d52cdcca79c2bbccfd43c7c5c6fe578faa364b896cfb0680be3
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 13KB
                                                                                      • SHA256 7148c5b54ec2a490188ec672fd71ba9ea2e974aed10424391cd26ed50ca9cb2b
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 8KB
                                                                                      • SHA256 688dafbc8dec9bea20382f26e21271a0b5de83c605fff6e7697778a4d245280f
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 1KB
                                                                                      • SHA256 7d7d1f197f354d1bff5edf23d5b1d8958bb7e29c4aad5a8f040aee289a242cab
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 1KB
                                                                                      • SHA256 6aac1687ecc0008e559708fb8776c73a53943882741c4dd06a8a5d7bf5f11ece
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 9KB
                                                                                      • SHA256 4a41516195a6547c26bf94a85f9755810403aa366def340e98cda186bee71f86
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 10KB
                                                                                      • SHA256 da56637d165f7dad63b2eaac598a92a3589c7f9b8bbe1730c2fb6b82607525bd
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 10KB
                                                                                      • SHA256 54a8ee3628b91c1245f1d7236d1be748b8154c3f84eb89624472179c6240bdb0
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 10KB
                                                                                      • SHA256 2253ba648c4dcb162fb170a893218d95c8090c23d71d3079d15f90d597784129
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 12KB
                                                                                      • SHA256 179651b42bd4fcbebff7e8e9a84da93c561aae1799b755b7fb55ba49f9525514
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 3KB
                                                                                      • SHA256 cc05924981cbda371d7451b7dc641eeccac349a11c027ce2202bccae41de97b5
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 1KB
                                                                                      • SHA256 554b142b8646a4cb64d2f34b8adb2083841fc4ff930f1282c26c9a98516f7497
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 14KB
                                                                                      • SHA256 94c2939c1a3240e854a3f821a7442eeb6d1a94aeb139985b51feeb409446f6ce
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 12KB
                                                                                      • SHA256 916953dbbacd4f050398755156f3d2d2af4daf63776d8d1191d9a879c095166b
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 11KB
                                                                                      • SHA256 4ec05d5941bbe1b296fc3d550c707a4e8ec33d838f9596fd2f26127a439397f6
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 973B
                                                                                      • SHA256 aa4fb68b5bf079fa3157a45252ab478aa3faaacce4f0461f26e506b7f27d25c2
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 1KB
                                                                                      • SHA256 7a12a7479b348d899b126717777d3920e547f84d5203932307f51a2c88c085c3
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 11KB
                                                                                      • SHA256 1dcb0a5188a62d6b52652c534c36054ca069aa1b9f43c3d7a96266144da741b9
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 12KB
                                                                                      • SHA256 fd3dfd78753170fb43c348fb43f91cd8c58c8c33bf4237b1cff1089513dde91d
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 8KB
                                                                                      • SHA256 f1ddb64f1907f0ee5103955228a8cf602e3cb827115a4e7dd83941609f3f898b
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 8KB
                                                                                      • SHA256 e4ddbbed456e35ba3083b54512420de4dcef62b50995ab83c005ca6bf7af553a
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 12KB
                                                                                      • SHA256 6660867d983a48c5943e4780462f4b6a24dae496824d0beb9a09e5134c14e869
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 13KB
                                                                                      • SHA256 58923ca04fe03a5bf70da34423a45c8cd0e5539374504223bba4746ecda8230f
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 12KB
                                                                                      • SHA256 1bf7773f28b063833a9d64b67f61cdd54e4501c4bc8dec8d0cc21c5766e7f308
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 13KB
                                                                                      • SHA256 14d2c39dad2299cb60d12d398207397332c3fdbd0c14d94b95e8dd5ef0944a3d
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 9KB
                                                                                      • SHA256 341e4d72ecdda64932960b385515e099dfeefd79841a6584fef068a5aa56686b
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 13KB
                                                                                      • SHA256 f3065d87d6e489bee5c8dd8f4146b24e608b7e5dd864805e6457b49cf06ebd15
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 14KB
                                                                                      • SHA256 60f437fca02b6ce22e32a75cf749780c37d90b066643e37ad2e49d353eb342e8
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw
                                                                                      • Size 14KB
                                                                                      • SHA256 2d368401b7fc0d08c50bc4981886211ad306a87511975a61842b68d78b3308e8
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_39e10243-eeee-438d-b825-b5a73d5e995e.raw9b7f89ef-18bc-4dfd-b418-e34cd929b5f7.tmp
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_39e10243-eeee-438d-b825-b5a73d5e995e.raw9b7f89ef-18bc-4dfd-b418-e34cd929b5f7.tmp
                                                                                      • Size 11KB
                                                                                      • SHA256 97932633683abe9c3486f1ade16c41bc8af561f241af6ae0130ce103c0b51025
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      session_7ce3757e-f88b-44e9-af07-543b4b29c6f9.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7ce3757e-f88b-44e9-af07-543b4b29c6f9.raw
                                                                                      • Size 493B
                                                                                      • SHA256 67ea0ca0c3578697e0a59579ede7296219f52bff2a8ad704d7d28cd3ba966872
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_7ce3757e-f88b-44e9-af07-543b4b29c6f9.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7ce3757e-f88b-44e9-af07-543b4b29c6f9.raw
                                                                                      • Size 765B
                                                                                      • SHA256 db1f9b6a1106eaf2587f349ca782e974a2c9e6325952b070aa096e53a1a732b3
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_7ce3757e-f88b-44e9-af07-543b4b29c6f9.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7ce3757e-f88b-44e9-af07-543b4b29c6f9.raw
                                                                                      • Size 1KB
                                                                                      • SHA256 246cdcefb613648d64e615e185245f4f31b565711e5ee23efe7a69abf53de332
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_7ce3757e-f88b-44e9-af07-543b4b29c6f9.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7ce3757e-f88b-44e9-af07-543b4b29c6f9.raw
                                                                                      • Size 1KB
                                                                                      • SHA256 741d46019e2241ecf56a41c110d6d69cc0fd524d9793df5e3f0f1f6ffd51c90c
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_7ce3757e-f88b-44e9-af07-543b4b29c6f9.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7ce3757e-f88b-44e9-af07-543b4b29c6f9.raw
                                                                                      • Size 941B
                                                                                      • SHA256 11398b72b076622060e32c8a010d5a18e727708f8218115eff056c5c59f15906
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_7ce3757e-f88b-44e9-af07-543b4b29c6f9.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7ce3757e-f88b-44e9-af07-543b4b29c6f9.raw
                                                                                      • Size 957B
                                                                                      • SHA256 fcae58556f781b4321e29b0ae97f22fe8af16622747e955c291d6c48aaab672a
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_7ce3757e-f88b-44e9-af07-543b4b29c6f9.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7ce3757e-f88b-44e9-af07-543b4b29c6f9.raw
                                                                                      • Size 957B
                                                                                      • SHA256 a8c560b105fa7b8e12590140a544c2633b8b2a87d73ce06063ce14ace4503746
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_7ce3757e-f88b-44e9-af07-543b4b29c6f9.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7ce3757e-f88b-44e9-af07-543b4b29c6f9.raw
                                                                                      • Size 1KB
                                                                                      • SHA256 a232d0cb545f7a642a839f0b7e7753e4e9a97e4c0ff1623532740a86b138b925
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_7ce3757e-f88b-44e9-af07-543b4b29c6f9.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7ce3757e-f88b-44e9-af07-543b4b29c6f9.raw
                                                                                      • Size 605B
                                                                                      • SHA256 5dfaaf176d9f2ddb360bdde9d46efef8fc5240057515a44afd42e93fc4a561bb
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_7ce3757e-f88b-44e9-af07-543b4b29c6f9.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7ce3757e-f88b-44e9-af07-543b4b29c6f9.raw
                                                                                      • Size 1KB
                                                                                      • SHA256 da20cf825c169095e0b3f95e4ace9052db3c0300c3500866828beed075690851
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      session_7ce3757e-f88b-44e9-af07-543b4b29c6f9.raw
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7ce3757e-f88b-44e9-af07-543b4b29c6f9.raw
                                                                                      • Size 1KB
                                                                                      • SHA256 539bd04ab863bd34f3a838d395269a01ff8f9f11ed2bd50a6376985d90a594d3
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      a3e4bd5b-d55b-43c5-bc2f-244eba8d12c0.tmp
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\a3e4bd5b-d55b-43c5-bc2f-244eba8d12c0.tmp
                                                                                      • Size 203B
                                                                                      • SHA256 671e5fb14fc6273d3d27a23cb3e615bb7fd0eb7d37f0a501e768e3f8e1ad53d4
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp5664.0.1208651887
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5664.0.1208651887
                                                                                      • Size 2KB
                                                                                      • SHA256 d7270d9d32f9effabb9076ca77fea92bfab0e333c18372985171fca6cb60f1b3
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp5664.0.1208651887
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5664.0.1208651887
                                                                                      • Size 1KB
                                                                                      • SHA256 3f4931fc3904f6c31a41fdf6048c9ac3b04ed8a45792932d911a37eb8f59460b
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp5664.0.1208651887
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5664.0.1208651887
                                                                                      • Size 265B
                                                                                      • SHA256 9525ea1fc5a82e08b05d3693728d0536b96cdaefd396f96cd092a8a72c3e69fb
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.0.1641799191
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.0.1641799191
                                                                                      • Size 2KB
                                                                                      • SHA256 d885217d04e5c31886f0eb8dfc14da05600475372c46e4f8b11576b429786b0c
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.0.1641799191
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.0.1641799191
                                                                                      • Size 3KB
                                                                                      • SHA256 d65fcce1451575d3ba8d88fc12422ff971f122649a353c9e3d2891548bbbc62f
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.0.1641799191
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.0.1641799191
                                                                                      • Size 3KB
                                                                                      • SHA256 57668440f1a0c14e376b1ba4cd255947897274ada0833553b96c64f1ba77f35b
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.0.1641799191
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.0.1641799191
                                                                                      • Size 3KB
                                                                                      • SHA256 d5d906b12dae615fd095c6978bbb341ef29f89edef866a9c4999291e42d27e25
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.0.1641799191
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.0.1641799191
                                                                                      • Size 3KB
                                                                                      • SHA256 1f7d56330899b1376db1ff311552f8bcdd9b17b8cd9185cc228dd2eba1b19e7b
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.0.1641799191
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.0.1641799191
                                                                                      • Size 3KB
                                                                                      • SHA256 cf806838d451c15c58085f9395bc95ac9aa29a30134bba22b900908627745329
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.0.1641799191
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.0.1641799191
                                                                                      • Size 3KB
                                                                                      • SHA256 b6a4edbcc603cde05bc0d058adab1fbf8d2d3f8ebca93042f19abc2b4e68d2fd
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.0.1641799191
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.0.1641799191
                                                                                      • Size 3KB
                                                                                      • SHA256 6205ce7507d16dfd8e5c4a325c259cbf42d34f51bc31bc47c8c1516f89647971
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.0.1641799191
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.0.1641799191
                                                                                      • Size 3KB
                                                                                      • SHA256 147bf16df538cd6bc669539a1c543c58e7969bc20f93d694f1188b4ab3cb03c8
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.0.1641799191
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.0.1641799191
                                                                                      • Size 1KB
                                                                                      • SHA256 1130f708b5c5a461427f1e8b07f72dae745b1778221da496d1696fdc388c4dd5
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.0.1641799191
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.0.1641799191
                                                                                      • Size 1KB
                                                                                      • SHA256 9f4cfd8feac1b423e2cfe7e93779ba8f6ca5f1fb80bc919967f3652a9b91643d
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.0.1641799191
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.0.1641799191
                                                                                      • Size 1KB
                                                                                      • SHA256 552cd19f6081e3b182fe42efd86c3c3f5f080b347324edd7222da0e22b4e2d01
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.0.1641799191
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.0.1641799191
                                                                                      • Size 1KB
                                                                                      • SHA256 7cad197f0d8e8749043e0f97bed8e0f42b2d4b6d8223c075b8e6157bc5f25213
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.0.1641799191
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.0.1641799191
                                                                                      • Size 1KB
                                                                                      • SHA256 07b9c4535a0175e865380125f43a4453166532f9b47e640ea239fff782f9a9c9
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.0.1641799191
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.0.1641799191
                                                                                      • Size 549B
                                                                                      • SHA256 09cf47aeaffac87bb61dea67237200bbdecb9c14fe7141e5db4ade7cb4dde7b7
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.0.1641799191
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.0.1641799191
                                                                                      • Size 647B
                                                                                      • SHA256 38ab317947cd2f7040aba4218f7aec5ed5f344af1e2155dd3f4c172a715b61da
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.0.1641799191
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.0.1641799191
                                                                                      • Size 1017B
                                                                                      • SHA256 f1f70ff249c3e743682d94348156d42e579688474fc991885e03dfb1e5b2483a
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.0.1641799191
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.0.1641799191
                                                                                      • Size 1KB
                                                                                      • SHA256 8ecf7a698ab3d6e27f3370d6483ee3b0a253d9c250cfc3e74f5a1ef15fcfea0b
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.0.1641799191
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.0.1641799191
                                                                                      • Size 737B
                                                                                      • SHA256 aee1166055a4ac78321c8d7423ee52b1787de89402c84635a493e40ad28b9bb1
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.0.1641799191
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.0.1641799191
                                                                                      • Size 827B
                                                                                      • SHA256 b7de2def9c4b5a242dfc29e418257c502ca295799da214c493be166638379ed5
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.0.1641799191
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.0.1641799191
                                                                                      • Size 921B
                                                                                      • SHA256 52ba5028de9ea81aac88bfa7714c5dfa1f12e195bdf29d5cd693f2a49c9c3977
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.0.1641799191
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.0.1641799191
                                                                                      • Size 1KB
                                                                                      • SHA256 e26d09467a69ddc15ebfd654c9fc1bf2c1e9cbdbd24c77671ee909a29505bb43
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.1.1058323863
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.1.1058323863
                                                                                      • Size 171B
                                                                                      • SHA256 db8facfcda6a7d9b136e1ed9e48ee235218737540fab8c9668632e598153f84f
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp6316.1.1058323863
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6316.1.1058323863
                                                                                      • Size 200B
                                                                                      • SHA256 95251250e5e95351d5af7d947a60d0baa2680ff5232008e0985b402aabd32751
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp7800.0.338370887
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7800.0.338370887
                                                                                      • Size 265B
                                                                                      • SHA256 340eb5d92cd46b1cbd3d888404e2fba4e2936276bd3097722bae39993b64664e
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp7800.0.338370887
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7800.0.338370887
                                                                                      • Size 1KB
                                                                                      • SHA256 b2a61b1f3962a62e5eb09df76b258f7e2c5be14bbd899ce90aa6eae257a34637
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      ssdfp7800.0.338370887
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7800.0.338370887
                                                                                      • Size 2KB
                                                                                      • SHA256 18b7be467126d112c1ce67d58e4c82bc23f44e1c94ad99ae6b2dc7febefe9539
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      suggestions_cache.json96f97fcc-4998-4d75-a05b-e07a32cc8a53.tmp
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.json96f97fcc-4998-4d75-a05b-e07a32cc8a53.tmp
                                                                                      • Size 652KB
                                                                                      • SHA256 ebe1db1f4aa4acfd20f8c1dca8b7ceccae13e627c1479df3fd68ae89a47aeaec
                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                      Submit Download

                                                                                      data_0
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_0
                                                                                      • Size 8KB
                                                                                      • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                      Submit Download

                                                                                      data_1
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
                                                                                      • Size 264KB
                                                                                      • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                      Submit Download

                                                                                      Local State
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                      • Size 2KB
                                                                                      • SHA256 89f9e0d8415dbcd4b7911fe4b785d75418c5ae832395d9d24b1b926f324f22f0
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      Local State
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                      • Size 3KB
                                                                                      • SHA256 82647cf0d6afb03d94b95035c5d775ff67258bcd09be4021ef6a80246d4abdfa
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      VariationsSeedV2
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                                      • Size 19B
                                                                                      • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                                                      • MD5 SHA1 SHA512
                                                                                      Submit Download

                                                                                      VariationsSeedV2
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                                      • Size 11B
                                                                                      • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                                                      • MD5 SHA1 SHA512
                                                                                      Submit Download

                                                                                      assistant_prefs.json
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
                                                                                      • Size 151B
                                                                                      • SHA256 1b8d5771d7aa7cc74768a3cc2503034f37df5ec901f74680587d6b34bad0d37e
                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                      Submit Download

                                                                                      metadata.json0ac42d59-5060-4ca6-a1d5-f38f1f5ec49f.tmp
                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\extensions_crx_cache\metadata.json0ac42d59-5060-4ca6-a1d5-f38f1f5ec49f.tmp
                                                                                      • Size 13B
                                                                                      • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                      • MD5 SHA1 SHA512
                                                                                      Submit Download

                                                                                      memory/6628-553-0x00007FFE38040000-0x00007FFE38041000-memory.dmp
                                                                                      Download

                                                                                      memory/6628-554-0x00007FFE37E30000-0x00007FFE37E31000-memory.dmp
                                                                                      Download