Overview

overview

8

Static

static

3

opera-spoof.exe

windows10-2004-x64

1

opera-spoof.exe

windows11-ltsc_2024-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    1049s
  • max time network
    1040s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    24/09/2026, 00:56

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    opera-spoof.exe
  • Size 2.6MB
  • Sample260924-bavrnaxvbw
  • SHA256 fde2f5e498975d258f66d4a59cc71d35dbd88d840a82522568d79d2da7b9deb8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarediscoverypersistenceprivilege_escalationransomwarespywarestealer

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 3 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Service Discovery 1 TTPs 1 IoCs

    Attempt to gather information on host's network.

    discovery
  • Drops file in Windows directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 5 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 9 IoCs
  • Modifies registry class 62 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 55 IoCs
  • Suspicious use of SendNotifyMessage 20 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\opera-spoof.exe
    "C:\Users\Admin\AppData\Local\Temp\opera-spoof.exe"
    1⤵
      PID:3852
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:4056
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ff87ee4c728,0x7ff87ee4c734,0x7ff87ee4c740
        2⤵
          PID:2920
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1928,i,12739948151856373976,3481211479054963886,524288 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=2144 /prefetch:11
          2⤵
          • Downloads MZ/PE file
          • System Time Discovery
          PID:3148
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,5906354572146994023,14132057067060472900,262144 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=2036 /prefetch:2
          2⤵
            PID:6008
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2360,i,10119805717031350908,12873597562373980588,524288 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:13
            2⤵
              PID:1172
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3312,i,14125961906853263434,15194419713249000585,2097152 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
              2⤵
                PID:4724
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3276,i,11985821234645675160,1616197540067938166,2097152 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
                2⤵
                  PID:3432
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4592,i,11477474535453672849,15000327104259192427,2097152 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=4604 /prefetch:1
                  2⤵
                    PID:2476
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4868,i,13570847125426967758,17496906664739902741,524288 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=4928 /prefetch:14
                    2⤵
                      PID:5960
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5408,i,16840133243943114392,8469829730089071084,524288 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
                      2⤵
                        PID:3856
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5468,i,3201643559234190363,10297857276437277720,2097152 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:1
                        2⤵
                          PID:1956
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5528,i,9698658624878948274,9865282627435227047,2097152 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:1
                          2⤵
                            PID:1348
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5600,i,13103934743761287858,8797638075352624193,2097152 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:1
                            2⤵
                              PID:3032
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5576,i,9239587001899943328,5837006740620844113,524288 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:14
                              2⤵
                                PID:2556
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5812,i,3996687867545847062,6573712916613164912,2097152 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:1
                                2⤵
                                  PID:1852
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5692,i,8508794845958234470,6353960760281348715,2097152 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:1
                                  2⤵
                                    PID:5688
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5712,i,12161253618964850483,4472314440699716884,524288 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:14
                                    2⤵
                                      PID:3504
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5540,i,4902808830944510858,16552117049412219546,2097152 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:1
                                      2⤵
                                        PID:2400
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6400,i,3245771008224759541,11154455179290347839,2097152 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:1
                                        2⤵
                                          PID:3208
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5532,i,16346755018824399234,9228237265160789632,524288 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=5736 /prefetch:14
                                          2⤵
                                            PID:724
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6392,i,10445600229163286611,9453750023796869720,2097152 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:1
                                            2⤵
                                              PID:4444
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5712,i,6020182076598420427,2422983130680158335,2097152 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:9
                                              2⤵
                                                PID:4352
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=4728,i,2997654252727723865,4492998064436045688,2097152 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:1
                                                2⤵
                                                  PID:4564
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6120,i,13922522753085601851,2326686312263240326,2097152 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:1
                                                  2⤵
                                                    PID:6064
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=3700,i,15532650376093983359,13723393119905055882,2097152 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:1
                                                    2⤵
                                                      PID:5288
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=3720,i,12219505328398288733,5200993308553324535,2097152 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
                                                      2⤵
                                                        PID:5604
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4668,i,6313261089389283055,10737865003248476466,524288 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:14
                                                        2⤵
                                                          PID:1852
                                                        • C:\Users\Admin\Downloads\OperaSetup.exe
                                                          "C:\Users\Admin\Downloads\OperaSetup.exe"
                                                          2⤵
                                                          • Executes dropped EXE
                                                          • System Location Discovery: System Language Discovery
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:6036
                                                          • C:\Users\Admin\AppData\Local\Temp\7zS497A665A\installer.exe
                                                            C:\Users\Admin\AppData\Local\Temp\7zS497A665A\installer.exe --server-tracking-blob=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
                                                            3⤵
                                                            • Downloads MZ/PE file
                                                            • Executes dropped EXE
                                                            • Enumerates connected drives
                                                            • Suspicious use of SetWindowsHookEx
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:1772
                                                            • C:\Users\Admin\AppData\Local\Temp\7zS497A665A\installer.exe
                                                              C:\Users\Admin\AppData\Local\Temp\7zS497A665A\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x2b4,0x2b8,0x2bc,0x288,0x2c0,0x7ff7da6169d8,0x7ff7da6169e8,0x7ff7da6169f8
                                                              4⤵
                                                              • Executes dropped EXE
                                                              PID:4324
                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\034b4e94-7e18-4104-b3ac-b14bc2fa1354 Opera Installer Temp\installer.exe
                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\034b4e94-7e18-4104-b3ac-b14bc2fa1354 Opera Installer Temp\installer.exe" --version
                                                              4⤵
                                                              • Executes dropped EXE
                                                              PID:2944
                                                            • C:\Users\Admin\AppData\Local\Temp\7zS497A665A\installer.exe
                                                              "C:\Users\Admin\AppData\Local\Temp\7zS497A665A\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=1772 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\034b4e94-7e18-4104-b3ac-b14bc2fa1354 Opera Installer Temp\opera_package_20260924015826" --session-guid=5607e40a-0001-4e3d-9b2c-ee9653b79005 --server-tracking-blob="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 " --desktopshortcut=1 --wait-for-package --initial-proc-handle=8809000000000000
                                                              4⤵
                                                              • Executes dropped EXE
                                                              • Enumerates connected drives
                                                              • Enumerates system info in registry
                                                              • Suspicious use of WriteProcessMemory
                                                              PID:724
                                                              • C:\Users\Admin\AppData\Local\Temp\7zS497A665A\installer.exe
                                                                C:\Users\Admin\AppData\Local\Temp\7zS497A665A\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x2ac,0x2b0,0x2c0,0x288,0x2c4,0x7ff7da6169d8,0x7ff7da6169e8,0x7ff7da6169f8
                                                                5⤵
                                                                • Executes dropped EXE
                                                                PID:3428
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe" --backend --initial-pid=1772 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\034b4e94-7e18-4104-b3ac-b14bc2fa1354 Opera Installer Temp\opera_package_202609240158261" --session-guid=5607e40a-0001-4e3d-9b2c-ee9653b79005 --server-tracking-blob="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 " --desktopshortcut=1 --install-subfolder=136.0.6008.22
                                                                5⤵
                                                                • Executes dropped EXE
                                                                • Enumerates connected drives
                                                                • Modifies registry class
                                                                PID:2592
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
                                                                  C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x2bc,0x2c0,0x2c4,0x29c,0x2c8,0x7ff7ccbb69d8,0x7ff7ccbb69e8,0x7ff7ccbb69f8
                                                                  6⤵
                                                                  • Executes dropped EXE
                                                                  PID:4528
                                                                • C:\Users\Admin\AppData\Local\Temp\.opera\034b4e94-7e18-4104-b3ac-b14bc2fa1354 Opera Installer Temp\opera_package_202609240158261\assistant\assistant_installer.exe
                                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\034b4e94-7e18-4104-b3ac-b14bc2fa1354 Opera Installer Temp\opera_package_202609240158261\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
                                                                  6⤵
                                                                  • Executes dropped EXE
                                                                  • Loads dropped DLL
                                                                  • Adds Run key to start application
                                                                  • System Location Discovery: System Language Discovery
                                                                  • Modifies Internet Explorer settings
                                                                  PID:5080
                                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\034b4e94-7e18-4104-b3ac-b14bc2fa1354 Opera Installer Temp\opera_package_202609240158261\assistant\assistant_installer.exe
                                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\034b4e94-7e18-4104-b3ac-b14bc2fa1354 Opera Installer Temp\opera_package_202609240158261\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x25c,0x260,0x264,0x238,0x268,0xd6c9cc,0xd6c9d8,0xd6c9e4
                                                                    7⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • System Location Discovery: System Language Discovery
                                                                    PID:5112
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                                                                    7⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • System Location Discovery: System Language Discovery
                                                                    • Enumerates system info in registry
                                                                    PID:1168
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                                                                      C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x24c,0x250,0x254,0xec,0x258,0x8ac9cc,0x8ac9d8,0x8ac9e4
                                                                      8⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • System Location Discovery: System Language Discovery
                                                                      PID:3032
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                                                                      8⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • System Location Discovery: System Language Discovery
                                                                      • Enumerates system info in registry
                                                                      • Suspicious use of FindShellTrayWindow
                                                                      • Suspicious use of SendNotifyMessage
                                                                      PID:5552
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                        9⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        PID:4824
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                          C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ff8540eed30,0x7ff8540eed40,0x7ff8540eed50
                                                                          10⤵
                                                                          • Executes dropped EXE
                                                                          PID:1180
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                        9⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        PID:5524
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                          C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x27c,0x280,0x284,0x278,0x274,0x7ff8540eed30,0x7ff8540eed40,0x7ff8540eed50
                                                                          10⤵
                                                                          • Executes dropped EXE
                                                                          PID:2508
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x294,0x2a4,0x2a8,0x278,0x2ac,0x11b7324,0x11b7330,0x11b733c
                                                                        9⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        • System Location Discovery: System Language Discovery
                                                                        PID:3000
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                          10⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          PID:4988
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ff8540eed30,0x7ff8540eed40,0x7ff8540eed50
                                                                            11⤵
                                                                            • Executes dropped EXE
                                                                            PID:2108
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                          10⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          PID:1100
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ff8540eed30,0x7ff8540eed40,0x7ff8540eed50
                                                                            11⤵
                                                                            • Executes dropped EXE
                                                                            PID:6548
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                          10⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          PID:6904
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x270,0x7ff8540eed30,0x7ff8540eed40,0x7ff8540eed50
                                                                            11⤵
                                                                            • Executes dropped EXE
                                                                            PID:7056
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\034b4e94-7e18-4104-b3ac-b14bc2fa1354 Opera Installer Temp\opera_package_202609240158261\de932af914ba00303d4a2778a383ac9c831101e2.crx"
                                                                  6⤵
                                                                  • Executes dropped EXE
                                                                  • Loads dropped DLL
                                                                  • Adds Run key to start application
                                                                  • Drops file in Windows directory
                                                                  • Checks processor information in registry
                                                                  • Enumerates system info in registry
                                                                  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                  PID:4940
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x218,0x23c,0x240,0x27c,0x280,0x7ff8540eed30,0x7ff8540eed40,0x7ff8540eed50
                                                                    7⤵
                                                                    • Executes dropped EXE
                                                                    PID:4808
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1652,i,16134093227162890489,2670377064167195506,262144 --field-trial-handle=2136,i,1314625048726565795,16040615533446183697,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2140,i,1220713138138657534,2116101610205209299,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2132 /prefetch:2
                                                                    7⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • Enumerates system info in registry
                                                                    PID:5064
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1960,i,18249207357451566205,14249865090065622838,524288 --field-trial-handle=2136,i,1314625048726565795,16040615533446183697,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2140,i,1220713138138657534,2116101610205209299,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2284 /prefetch:11
                                                                    7⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • System Time Discovery
                                                                    PID:4120
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2536,i,2363544968211353451,13195399737695989646,524288 --field-trial-handle=2136,i,1314625048726565795,16040615533446183697,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2140,i,1220713138138657534,2116101610205209299,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2528 /prefetch:13
                                                                    7⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • Enumerates system info in registry
                                                                    PID:2200
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3616,i,6144470284981943031,9082645679743647937,2097152 --field-trial-handle=2136,i,1314625048726565795,16040615533446183697,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2140,i,1220713138138657534,2116101610205209299,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3968 /prefetch:9
                                                                    7⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • Enumerates system info in registry
                                                                    PID:3208
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3956,i,7141941817010158004,18222556930996044825,524288 --field-trial-handle=2136,i,1314625048726565795,16040615533446183697,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2140,i,1220713138138657534,2116101610205209299,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4164 /prefetch:14
                                                                    7⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    PID:6216
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4208,i,12379430304574145670,9086538218157083108,2097152 --field-trial-handle=2136,i,1314625048726565795,16040615533446183697,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2140,i,1220713138138657534,2116101610205209299,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4252 /prefetch:9
                                                                    7⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    PID:6228
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4824,i,8425512962528560240,9802375760056489986,524288 --field-trial-handle=2136,i,1314625048726565795,16040615533446183697,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2140,i,1220713138138657534,2116101610205209299,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4832 /prefetch:12
                                                                    7⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • Enumerates system info in registry
                                                                    PID:6816
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4836,i,13886851686590484329,2080202709948132619,524288 --field-trial-handle=2136,i,1314625048726565795,16040615533446183697,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2140,i,1220713138138657534,2116101610205209299,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4840 /prefetch:14
                                                                    7⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • Enumerates system info in registry
                                                                    PID:6864
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4988,i,3518159617379621591,7672945809255795472,524288 --field-trial-handle=2136,i,1314625048726565795,16040615533446183697,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2140,i,1220713138138657534,2116101610205209299,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3412 /prefetch:14
                                                                    7⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • Enumerates system info in registry
                                                                    PID:4292
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5464,i,11461983030399099468,11095617069032053587,2097152 --field-trial-handle=2136,i,1314625048726565795,16040615533446183697,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2140,i,1220713138138657534,2116101610205209299,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5480 /prefetch:1
                                                                    7⤵
                                                                    • Executes dropped EXE
                                                                    PID:7652
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
                                                                  6⤵
                                                                  • Executes dropped EXE
                                                                  • Adds Run key to start application
                                                                  • Drops file in Windows directory
                                                                  • Checks processor information in registry
                                                                  • Enumerates system info in registry
                                                                  • Modifies registry class
                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                  • Suspicious use of FindShellTrayWindow
                                                                  • Suspicious use of SetWindowsHookEx
                                                                  PID:7284
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0xac,0xb0,0x27c,0xa8,0x280,0x7ff8540eed30,0x7ff8540eed40,0x7ff8540eed50
                                                                    7⤵
                                                                    • Executes dropped EXE
                                                                    PID:7080
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1696,i,2351678988088633177,18186894246001893415,262144 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2000 /prefetch:2
                                                                    7⤵
                                                                    • Executes dropped EXE
                                                                    • Suspicious use of SetWindowsHookEx
                                                                    PID:1460
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1928,i,17479406636279740098,1243012760879818839,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2040 /prefetch:11
                                                                    7⤵
                                                                    • Executes dropped EXE
                                                                    • System Time Discovery
                                                                    • Enumerates system info in registry
                                                                    PID:2900
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2520,i,5806488396444654811,17833279295266818285,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2720 /prefetch:13
                                                                    7⤵
                                                                    • Executes dropped EXE
                                                                    PID:6396
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2396,i,3791225766912803815,13253673884146322259,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3312 /prefetch:14
                                                                    7⤵
                                                                    • Executes dropped EXE
                                                                    PID:6600
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3280,i,6183481019359407571,6247066554800865458,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3388 /prefetch:14
                                                                    7⤵
                                                                    • Executes dropped EXE
                                                                    PID:4660
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3284,i,10177906093694675341,6031957841983037317,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3408 /prefetch:14
                                                                    7⤵
                                                                    • Executes dropped EXE
                                                                    • Enumerates system info in registry
                                                                    PID:6744
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3296,i,13921149909231179957,12130732181192411622,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3428 /prefetch:14
                                                                    7⤵
                                                                    • Executes dropped EXE
                                                                    • Enumerates system info in registry
                                                                    PID:6220
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3256,i,5881154420893386954,11532579029489835489,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3368 /prefetch:14
                                                                    7⤵
                                                                    • Executes dropped EXE
                                                                    PID:7592
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3308,i,14591811399667699926,12544273849467805707,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3448 /prefetch:14
                                                                    7⤵
                                                                    • Executes dropped EXE
                                                                    • Enumerates system info in registry
                                                                    PID:6128
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3764,i,3352741692226412990,1479085040657526887,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3964 /prefetch:1
                                                                    7⤵
                                                                      PID:4372
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3236,i,1992519703554803376,11103711097126163151,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3348 /prefetch:14
                                                                      7⤵
                                                                        PID:6644
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_gx_splash.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                                                                        7⤵
                                                                        • Modifies registry class
                                                                        PID:7692
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4812,i,695282638299306871,17643791267648936428,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4824 /prefetch:9
                                                                        7⤵
                                                                          PID:6724
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4980,i,18368264858223115479,10208805914455975257,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5000 /prefetch:1
                                                                          7⤵
                                                                          • Enumerates system info in registry
                                                                          PID:6960
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5292,i,13494414024794609952,10360459973509243151,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5296 /prefetch:1
                                                                          7⤵
                                                                            PID:6424
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5336,i,13392170393185974963,5999651042951239982,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5348 /prefetch:1
                                                                            7⤵
                                                                              PID:6444
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6328,i,13033588688422083065,10506540875560570066,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6440 /prefetch:9
                                                                              7⤵
                                                                                PID:7252
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6736,i,11223828467295480562,3487224757900687625,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6956 /prefetch:9
                                                                                7⤵
                                                                                  PID:6924
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6996,i,2837073387077510292,13735902037822019401,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6968 /prefetch:9
                                                                                  7⤵
                                                                                  • Enumerates system info in registry
                                                                                  PID:6952
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7416,i,16532376637690147030,13909505871855781917,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=7400 /prefetch:12
                                                                                  7⤵
                                                                                    PID:7432
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5444,i,18263380653836019031,12444820531047505496,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7024 /prefetch:14
                                                                                    7⤵
                                                                                      PID:6288
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6924,i,16557591385405789244,12719380698660696891,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7036 /prefetch:14
                                                                                      7⤵
                                                                                      • Enumerates system info in registry
                                                                                      PID:6820
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6716,i,14801440165894818357,14286469461423998055,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7524 /prefetch:14
                                                                                      7⤵
                                                                                      • Enumerates system info in registry
                                                                                      PID:3500
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7716,i,17576218634324474758,3433739693152570893,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7728 /prefetch:14
                                                                                      7⤵
                                                                                        PID:5900
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7736,i,2586750326583029675,1735058412789500338,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7864 /prefetch:14
                                                                                        7⤵
                                                                                          PID:6224
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7872,i,3482979755448095692,308498303820644359,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7996 /prefetch:14
                                                                                          7⤵
                                                                                            PID:6292
                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6864,i,17631371486959556761,10793009225974552458,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8168 /prefetch:14
                                                                                            7⤵
                                                                                              PID:1544
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8000,i,3002612775076410367,16026376887232768165,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8176 /prefetch:14
                                                                                              7⤵
                                                                                              • Enumerates system info in registry
                                                                                              PID:6916
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8404,i,8292063702320749458,15023177384929952101,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8416 /prefetch:14
                                                                                              7⤵
                                                                                                PID:1128
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8452,i,16863909071958426937,4730046359103871957,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8560 /prefetch:14
                                                                                                7⤵
                                                                                                • Enumerates system info in registry
                                                                                                PID:4916
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8580,i,17730674220570440567,8626103605269853892,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8588 /prefetch:14
                                                                                                7⤵
                                                                                                • Enumerates system info in registry
                                                                                                PID:7596
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8824,i,2790301085010259634,16840581225350115377,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8836 /prefetch:14
                                                                                                7⤵
                                                                                                  PID:8136
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8880,i,3260436510274855352,9134214963972669803,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8864 /prefetch:14
                                                                                                  7⤵
                                                                                                    PID:4836
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6972,i,11529941917560624011,6475034401960060348,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8860 /prefetch:14
                                                                                                    7⤵
                                                                                                      PID:6200
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9240,i,2842227525338805619,16213693710216457314,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9252 /prefetch:14
                                                                                                      7⤵
                                                                                                      • Enumerates system info in registry
                                                                                                      PID:6504
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9268,i,634460283929366402,1703325049055068794,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9388 /prefetch:14
                                                                                                      7⤵
                                                                                                      • Enumerates system info in registry
                                                                                                      PID:7200
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=9604,i,11150893222119970962,6955870881267736251,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9656 /prefetch:9
                                                                                                      7⤵
                                                                                                      • Enumerates system info in registry
                                                                                                      PID:4048
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9772,i,14105870259967131814,14745155970781018193,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9812 /prefetch:14
                                                                                                      7⤵
                                                                                                        PID:8164
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=9960,i,935586795702384935,372338895999992762,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9972 /prefetch:1
                                                                                                        7⤵
                                                                                                          PID:5608
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9624,i,14942868671104128354,6837995805200058377,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9628 /prefetch:14
                                                                                                          7⤵
                                                                                                          • Enumerates system info in registry
                                                                                                          PID:8664
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10412,i,8288344835356923274,11728930801396371476,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10684 /prefetch:14
                                                                                                          7⤵
                                                                                                            PID:8676
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                                                                                            7⤵
                                                                                                            • Enumerates system info in registry
                                                                                                            PID:9600
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                              C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x298,0x29c,0x2a0,0x21c,0x2a4,0x7ff67cf35598,0x7ff67cf355a8,0x7ff67cf355b8
                                                                                                              8⤵
                                                                                                                PID:9796
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3472,i,10855877442007545369,4441827517360793718,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=5560 /prefetch:14
                                                                                                              7⤵
                                                                                                                PID:9616
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9796,i,13364719397232605714,1302503493526585687,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=11068 /prefetch:14
                                                                                                                7⤵
                                                                                                                • Enumerates system info in registry
                                                                                                                PID:9724
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=11212,i,3225204310996879467,16343619509321860137,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11180 /prefetch:1
                                                                                                                7⤵
                                                                                                                • Enumerates system info in registry
                                                                                                                PID:9920
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11372,i,5821762101893981692,13314425140463736789,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11408 /prefetch:14
                                                                                                                7⤵
                                                                                                                  PID:10008
                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11548,i,13296760767323219793,9290288462474597931,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11556 /prefetch:14
                                                                                                                  7⤵
                                                                                                                  • Enumerates system info in registry
                                                                                                                  PID:10056
                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8012,i,17085021198098742114,13735292252892898547,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=8124 /prefetch:14
                                                                                                                  7⤵
                                                                                                                    PID:9268
                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11868,i,16001887638890084590,11335857608379323501,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=7872 /prefetch:14
                                                                                                                    7⤵
                                                                                                                      PID:6456
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8152,i,7188862021831255359,10159560895305506792,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=11980 /prefetch:14
                                                                                                                      7⤵
                                                                                                                        PID:6912
                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10944,i,12251890170695915378,10798506322934008634,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=10412 /prefetch:14
                                                                                                                        7⤵
                                                                                                                        • Enumerates system info in registry
                                                                                                                        PID:7340
                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12216,i,14732507767221834702,403630211098383492,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=12228 /prefetch:14
                                                                                                                        7⤵
                                                                                                                        • Enumerates system info in registry
                                                                                                                        PID:8292
                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10820,i,14881395260093455173,2746316455000095095,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=12372 /prefetch:14
                                                                                                                        7⤵
                                                                                                                        • Enumerates system info in registry
                                                                                                                        PID:8316
                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12356,i,29303762445432768,15696456621883827919,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=10920 /prefetch:14
                                                                                                                        7⤵
                                                                                                                          PID:8736
                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12552,i,5014405966680196384,6485976519264279346,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=12564 /prefetch:14
                                                                                                                          7⤵
                                                                                                                          • Enumerates system info in registry
                                                                                                                          PID:8780
                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=12748,i,16516138990717901108,5479557259467788728,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=12796 /prefetch:9
                                                                                                                          7⤵
                                                                                                                          • Enumerates system info in registry
                                                                                                                          PID:9164
                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=12936,i,4074186652221762177,13777822174101582065,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=12824 /prefetch:9
                                                                                                                          7⤵
                                                                                                                            PID:6624
                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=8940,i,11400403260596289680,16877087051096357855,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=8960 /prefetch:9
                                                                                                                            7⤵
                                                                                                                              PID:9820
                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11852,i,13879959538280693263,3357303795867691595,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=9684 /prefetch:14
                                                                                                                              7⤵
                                                                                                                              • Enumerates system info in registry
                                                                                                                              PID:7512
                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9564,i,13889308821627071199,14124830558633572028,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=11836 /prefetch:14
                                                                                                                              7⤵
                                                                                                                              • Enumerates system info in registry
                                                                                                                              PID:8184
                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=5436,i,16971821992566419325,2689959647473279718,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=5384 /prefetch:1
                                                                                                                              7⤵
                                                                                                                                PID:9712
                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12116,i,8377016870293481251,2732869733846801739,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=9656 /prefetch:14
                                                                                                                                7⤵
                                                                                                                                  PID:10044
                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5428,i,7461424779471958461,5424077206060688304,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=5564 /prefetch:14
                                                                                                                                  7⤵
                                                                                                                                    PID:9760
                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7768,i,16103184062629213308,483250144123010460,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=12472 /prefetch:14
                                                                                                                                    7⤵
                                                                                                                                      PID:10056
                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=5372,i,2390522334085929421,15784862830310672663,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=8144 /prefetch:1
                                                                                                                                      7⤵
                                                                                                                                      • Enumerates system info in registry
                                                                                                                                      PID:9268
                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=12456,i,2849371213863143263,1973247782226314201,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=12116 /prefetch:1
                                                                                                                                      7⤵
                                                                                                                                        PID:10000
                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=9040,i,1248599512428759252,3968611197586809914,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=3460 /prefetch:1
                                                                                                                                        7⤵
                                                                                                                                          PID:8264
                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=9036,i,10086793915247427638,1471099253757873612,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=4596 /prefetch:9
                                                                                                                                          7⤵
                                                                                                                                            PID:8344
                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=6976,i,7964985007953378069,8747057031245821231,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=4636 /prefetch:9
                                                                                                                                            7⤵
                                                                                                                                              PID:4544
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=4828,i,3218168744058877826,1797133628949326871,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=4632 /prefetch:1
                                                                                                                                              7⤵
                                                                                                                                              • Enumerates system info in registry
                                                                                                                                              PID:5904
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12468,i,4477426079187176558,17739387957220102291,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=3504 /prefetch:14
                                                                                                                                              7⤵
                                                                                                                                                PID:6944
                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5816,i,17360763258092817190,11075439180871490100,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=9076 /prefetch:14
                                                                                                                                                7⤵
                                                                                                                                                  PID:1352
                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3464,i,9912832020805069439,16560586541772491658,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=12236 /prefetch:14
                                                                                                                                                  7⤵
                                                                                                                                                    PID:6832
                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12320,i,6519740088520703638,8114600405297274413,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709056590010169 --mojo-platform-channel-handle=7384 /prefetch:14
                                                                                                                                                    7⤵
                                                                                                                                                    • Enumerates system info in registry
                                                                                                                                                    PID:9616
                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=3640,i,3980425880726684781,12557391254428138420,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709057527052018 --mojo-platform-channel-handle=3636 /prefetch:9
                                                                                                                                                    7⤵
                                                                                                                                                      PID:7396
                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=3628,i,14857486295476394934,10385537781680135285,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709058464093867 --mojo-platform-channel-handle=3444 /prefetch:1
                                                                                                                                                      7⤵
                                                                                                                                                      • Enumerates system info in registry
                                                                                                                                                      PID:7232
                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=11876,i,11059507367666229291,13723177736511744321,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709059401135716 --mojo-platform-channel-handle=9852 /prefetch:1
                                                                                                                                                      7⤵
                                                                                                                                                        PID:2604
                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=4652,i,14429687476263645381,8713730854790674916,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709060338177565 --mojo-platform-channel-handle=5428 /prefetch:1
                                                                                                                                                        7⤵
                                                                                                                                                          PID:6816
                                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=9492,i,11258702778357198175,5853658761066525843,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709061275219414 --mojo-platform-channel-handle=3632 /prefetch:1
                                                                                                                                                          7⤵
                                                                                                                                                            PID:9300
                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=5448,i,13770297353584435722,13594493948174870335,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709062212261263 --mojo-platform-channel-handle=3592 /prefetch:1
                                                                                                                                                            7⤵
                                                                                                                                                              PID:4800
                                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=12116,i,10769252149508889446,6009265180488479550,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709063149303112 --mojo-platform-channel-handle=12228 /prefetch:9
                                                                                                                                                              7⤵
                                                                                                                                                                PID:10048
                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=3736,i,7165597398548348455,2169468545070930027,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709064086344961 --mojo-platform-channel-handle=3692 /prefetch:1
                                                                                                                                                                7⤵
                                                                                                                                                                  PID:9968
                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=8744,i,15977547555227300821,15267439660406908374,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709065023386810 --mojo-platform-channel-handle=7852 /prefetch:9
                                                                                                                                                                  7⤵
                                                                                                                                                                  • Enumerates system info in registry
                                                                                                                                                                  PID:4836
                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=8772,i,5270976456840204555,3728843016315284339,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709065960428659 --mojo-platform-channel-handle=11404 /prefetch:1
                                                                                                                                                                  7⤵
                                                                                                                                                                    PID:9116
                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --disable-gpu-sandbox --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAAAAAAAAAAAADgAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAADAAAAAEAAAAAAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=d3d11-warp-webgl --metrics-shmem-handle=2412,i,6834391684289429588,5325983166948015088,262144 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709066897470508 --mojo-platform-channel-handle=7844 /prefetch:10
                                                                                                                                                                    7⤵
                                                                                                                                                                    • Network Service Discovery
                                                                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                    PID:9992
                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12716,i,10077357704006673230,16236083958698694859,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709067834512357 --mojo-platform-channel-handle=12916 /prefetch:14
                                                                                                                                                                    7⤵
                                                                                                                                                                    • Enumerates system info in registry
                                                                                                                                                                    PID:7576
                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=5032,i,17801917915334941829,4617919401387590187,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709068771554206 --mojo-platform-channel-handle=12760 /prefetch:9
                                                                                                                                                                    7⤵
                                                                                                                                                                      PID:8300
                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=8720,i,4686695010352583567,2436652849836037853,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709069708596055 --mojo-platform-channel-handle=7368 /prefetch:9
                                                                                                                                                                      7⤵
                                                                                                                                                                      • Enumerates system info in registry
                                                                                                                                                                      PID:1872
                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=3488,i,9965125883343129202,10147181309829239895,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709070645637904 --mojo-platform-channel-handle=4128 /prefetch:9
                                                                                                                                                                      7⤵
                                                                                                                                                                        PID:4336
                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8624,i,15944931653723792329,12209639414412784490,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709071582679753 --mojo-platform-channel-handle=8588 /prefetch:14
                                                                                                                                                                        7⤵
                                                                                                                                                                          PID:1440
                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=6656,i,18358622604278018383,1991376809401179950,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709072519721602 --mojo-platform-channel-handle=12916 /prefetch:9
                                                                                                                                                                          7⤵
                                                                                                                                                                            PID:2376
                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=4132,i,320214681590547964,1621820858055385143,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709073456763451 --mojo-platform-channel-handle=12532 /prefetch:9
                                                                                                                                                                            7⤵
                                                                                                                                                                              PID:10152
                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=13096,i,10641426970909181022,8637000741232864748,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709074393805300 --mojo-platform-channel-handle=6700 /prefetch:14
                                                                                                                                                                              7⤵
                                                                                                                                                                              • Enumerates system info in registry
                                                                                                                                                                              PID:9264
                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --metrics-shmem-handle=13020,i,2294322797379527332,12771086601863858006,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709075330847149 --mojo-platform-channel-handle=13056 /prefetch:9
                                                                                                                                                                              7⤵
                                                                                                                                                                                PID:6536
                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --metrics-shmem-handle=11864,i,12169340563846189130,7944367929332602385,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709076267888998 --mojo-platform-channel-handle=8360 /prefetch:9
                                                                                                                                                                                7⤵
                                                                                                                                                                                  PID:1728
                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6508,i,300644325420454252,5472858789312917870,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709077204930847 --mojo-platform-channel-handle=8892 /prefetch:14
                                                                                                                                                                                  7⤵
                                                                                                                                                                                    PID:8724
                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --metrics-shmem-handle=9584,i,7929896320312644305,1887736440804481781,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709078141972696 --mojo-platform-channel-handle=11020 /prefetch:9
                                                                                                                                                                                    7⤵
                                                                                                                                                                                    • Enumerates system info in registry
                                                                                                                                                                                    PID:5512
                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --metrics-shmem-handle=8352,i,10429485180963187486,10178127080083752623,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709079079014545 --mojo-platform-channel-handle=8316 /prefetch:9
                                                                                                                                                                                    7⤵
                                                                                                                                                                                      PID:900
                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8336,i,53748349849567926,8258926496201736768,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709080016056394 --mojo-platform-channel-handle=8204 /prefetch:14
                                                                                                                                                                                      7⤵
                                                                                                                                                                                        PID:4812
                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --metrics-shmem-handle=8372,i,3809180788177975294,9355359862386355197,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709080953098243 --mojo-platform-channel-handle=13012 /prefetch:9
                                                                                                                                                                                        7⤵
                                                                                                                                                                                        • Enumerates system info in registry
                                                                                                                                                                                        PID:3292
                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=11012,i,12068157834192888316,13537288088532359829,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709081890140092 --mojo-platform-channel-handle=4944 /prefetch:9
                                                                                                                                                                                        7⤵
                                                                                                                                                                                          PID:7356
                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --metrics-shmem-handle=7840,i,12286319141557616651,9054061935248149376,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709082827181941 --mojo-platform-channel-handle=7948 /prefetch:9
                                                                                                                                                                                          7⤵
                                                                                                                                                                                            PID:7996
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9736,i,4256696395692986462,17736060678748464931,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709083764223790 --mojo-platform-channel-handle=9928 /prefetch:14
                                                                                                                                                                                            7⤵
                                                                                                                                                                                              PID:6556
                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9352,i,10001277269564403872,9888175397146452099,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709084701265639 --mojo-platform-channel-handle=9348 /prefetch:14
                                                                                                                                                                                              7⤵
                                                                                                                                                                                                PID:8980
                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --metrics-shmem-handle=9296,i,575017156300313392,6898977179154999559,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709085638307488 --mojo-platform-channel-handle=6512 /prefetch:9
                                                                                                                                                                                                7⤵
                                                                                                                                                                                                  PID:3524
                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --metrics-shmem-handle=9280,i,10709917477225681088,7470861608444497266,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709086575349337 --mojo-platform-channel-handle=9352 /prefetch:9
                                                                                                                                                                                                  7⤵
                                                                                                                                                                                                    PID:3520
                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --metrics-shmem-handle=8700,i,6481655756838838542,9007022966123244438,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709087512391186 --mojo-platform-channel-handle=9316 /prefetch:9
                                                                                                                                                                                                    7⤵
                                                                                                                                                                                                    • Enumerates system info in registry
                                                                                                                                                                                                    PID:3016
                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8272,i,1816286995928918955,2864945846108422881,524288 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709088449433035 --mojo-platform-channel-handle=7536 /prefetch:14
                                                                                                                                                                                                    7⤵
                                                                                                                                                                                                      PID:9176
                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --metrics-shmem-handle=11028,i,16154612738730614354,9450743999456460709,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709089386474884 --mojo-platform-channel-handle=9328 /prefetch:9
                                                                                                                                                                                                      7⤵
                                                                                                                                                                                                      • Enumerates system info in registry
                                                                                                                                                                                                      PID:8604
                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --metrics-shmem-handle=7584,i,12325976786630618233,3087511346903512389,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709090323516733 --mojo-platform-channel-handle=7572 /prefetch:9
                                                                                                                                                                                                      7⤵
                                                                                                                                                                                                        PID:6592
                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --version
                                                                                                                                                                                                        7⤵
                                                                                                                                                                                                        • Enumerates system info in registry
                                                                                                                                                                                                        PID:10112
                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x26c,0x274,0x278,0x270,0x27c,0x7ff8540eed30,0x7ff8540eed40,0x7ff8540eed50
                                                                                                                                                                                                          8⤵
                                                                                                                                                                                                            PID:8092
                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --metrics-shmem-handle=4908,i,12151644987706077133,358125052990567687,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709091260558582 --mojo-platform-channel-handle=7552 /prefetch:9
                                                                                                                                                                                                          7⤵
                                                                                                                                                                                                            PID:7556
                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --metrics-shmem-handle=7604,i,1298682125544105532,8545642508548561834,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709092197600431 --mojo-platform-channel-handle=10520 /prefetch:9
                                                                                                                                                                                                            7⤵
                                                                                                                                                                                                            • Enumerates system info in registry
                                                                                                                                                                                                            PID:9056
                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                                                                                                                                                                                            7⤵
                                                                                                                                                                                                            • Enumerates system info in registry
                                                                                                                                                                                                            PID:7000
                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x2a0,0x2a4,0x2a8,0x27c,0x2ac,0x7ff67cf35598,0x7ff67cf355a8,0x7ff67cf355b8
                                                                                                                                                                                                              8⤵
                                                                                                                                                                                                                PID:2336
                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --metrics-shmem-handle=9296,i,15735367944918986991,8543484037125707331,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709093134642280 --mojo-platform-channel-handle=4920 /prefetch:9
                                                                                                                                                                                                              7⤵
                                                                                                                                                                                                                PID:9188
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --metrics-shmem-handle=9280,i,17259127843661901547,8245934541673884698,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709094071684129 --mojo-platform-channel-handle=9368 /prefetch:9
                                                                                                                                                                                                                7⤵
                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                PID:2492
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --metrics-shmem-handle=8228,i,16325496901168053729,6285895198853702467,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709095008725978 --mojo-platform-channel-handle=7840 /prefetch:9
                                                                                                                                                                                                                7⤵
                                                                                                                                                                                                                  PID:9076
                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --metrics-shmem-handle=7564,i,6030698212448725,15080897890844567998,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709095945767827 --mojo-platform-channel-handle=7592 /prefetch:9
                                                                                                                                                                                                                  7⤵
                                                                                                                                                                                                                    PID:1668
                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --metrics-shmem-handle=9104,i,3458691091312503048,12179420548591275847,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709096882809676 --mojo-platform-channel-handle=9380 /prefetch:9
                                                                                                                                                                                                                    7⤵
                                                                                                                                                                                                                      PID:1828
                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --metrics-shmem-handle=7520,i,924207022757205573,13550799924882099995,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709097819851525 --mojo-platform-channel-handle=7896 /prefetch:9
                                                                                                                                                                                                                      7⤵
                                                                                                                                                                                                                        PID:9192
                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --metrics-shmem-handle=4920,i,17699001813089361766,4142078878288089517,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709098756893374 --mojo-platform-channel-handle=10520 /prefetch:9
                                                                                                                                                                                                                        7⤵
                                                                                                                                                                                                                          PID:7012
                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --metrics-shmem-handle=11868,i,17879074702874728726,13094552288150399653,2097152 --field-trial-handle=2004,i,2295299194641769371,17958699798837474666,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,9167327512143010091,3768220886257965963,4 --trace-process-track-uuid=3190709099693935223 --mojo-platform-channel-handle=7904 /prefetch:9
                                                                                                                                                                                                                          7⤵
                                                                                                                                                                                                                          • Enumerates system info in registry
                                                                                                                                                                                                                          PID:1440
                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\034b4e94-7e18-4104-b3ac-b14bc2fa1354 Opera Installer Temp\opera_package_202609240158261\assistant\Assistant_136.0.6008.22_Setup.exe_sfx.exe
                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\034b4e94-7e18-4104-b3ac-b14bc2fa1354 Opera Installer Temp\opera_package_202609240158261\assistant\Assistant_136.0.6008.22_Setup.exe_sfx.exe"
                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                    PID:3856
                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\034b4e94-7e18-4104-b3ac-b14bc2fa1354 Opera Installer Temp\opera_package_202609240158261\assistant\assistant_installer.exe
                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\034b4e94-7e18-4104-b3ac-b14bc2fa1354 Opera Installer Temp\opera_package_202609240158261\assistant\assistant_installer.exe" --version
                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                                    • Loads dropped DLL
                                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                    • Enumerates system info in registry
                                                                                                                                                                                                                    • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                    PID:4180
                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\034b4e94-7e18-4104-b3ac-b14bc2fa1354 Opera Installer Temp\opera_package_202609240158261\assistant\assistant_installer.exe
                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\034b4e94-7e18-4104-b3ac-b14bc2fa1354 Opera Installer Temp\opera_package_202609240158261\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xd6c9cc,0xd6c9d8,0xd6c9e4
                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                      • Loads dropped DLL
                                                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                      PID:4820
                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6408,i,13474978107034056685,18371130110977945868,2097152 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=5628 /prefetch:1
                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                  PID:4700
                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6088,i,8371864224361313518,9734730981598299393,2097152 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:1
                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                    PID:2748
                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5412,i,1241928248428352545,17150833762226066520,524288 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:14
                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                      PID:3032
                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4724,i,15013937065135093946,11506713272919178564,524288 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                        PID:2884
                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6520,i,13196716174812744857,1178975735590293034,524288 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:14
                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                          PID:5140
                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5924,i,12579117642579952260,9663228916530739489,262144 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=3364 /prefetch:10
                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                          PID:5412
                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=1968,i,8294239215717710260,7807869612063927208,524288 --field-trial-handle=2040,i,379842580170211607,17908834791332509900,262144 --variations-seed-version --mojo-platform-channel-handle=3968 /prefetch:14
                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                            PID:600
                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                            PID:6048
                                                                                                                                                                                                                          • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                              PID:2096
                                                                                                                                                                                                                            • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                              C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                              • Modifies data under HKEY_USERS
                                                                                                                                                                                                                              PID:5708
                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                              • Loads dropped DLL
                                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                              • Suspicious use of FindShellTrayWindow
                                                                                                                                                                                                                              • Suspicious use of SendNotifyMessage
                                                                                                                                                                                                                              PID:5000
                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                • Loads dropped DLL
                                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                                PID:6068
                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ff8540eed30,0x7ff8540eed40,0x7ff8540eed50
                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                                  PID:6804
                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                • Loads dropped DLL
                                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                                PID:7064
                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ff8540eed30,0x7ff8540eed40,0x7ff8540eed50
                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                                  PID:6320
                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x2a0,0x2a4,0x2a8,0x274,0x2ac,0x11b7324,0x11b7330,0x11b733c
                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                • Loads dropped DLL
                                                                                                                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                PID:6172
                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                                  • Loads dropped DLL
                                                                                                                                                                                                                                  PID:8016
                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ff8540eed30,0x7ff8540eed40,0x7ff8540eed50
                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                                                    PID:7132
                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                                  • Loads dropped DLL
                                                                                                                                                                                                                                  • Enumerates system info in registry
                                                                                                                                                                                                                                  PID:7796
                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ff8540eed30,0x7ff8540eed40,0x7ff8540eed50
                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                                                    PID:7824
                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                                  • Loads dropped DLL
                                                                                                                                                                                                                                  PID:7876
                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x23c,0x240,0x27c,0x218,0x280,0x7ff8540eed30,0x7ff8540eed40,0x7ff8540eed50
                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                                                    PID:7900
                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                              • Loads dropped DLL
                                                                                                                                                                                                                              PID:1140
                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x284,0x288,0x28c,0x280,0x290,0x7ff8540eed30,0x7ff8540eed40,0x7ff8540eed50
                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                PID:6388
                                                                                                                                                                                                                            • C:\Windows\system32\wbem\unsecapp.exe
                                                                                                                                                                                                                              C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                PID:6856
                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                                PID:9644
                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x294,0x298,0x29c,0x224,0x2a0,0x7ff67cf35598,0x7ff67cf355a8,0x7ff67cf355b8
                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                    PID:6792
                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                      PID:7552
                                                                                                                                                                                                                                  • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                    C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                      PID:9128
                                                                                                                                                                                                                                    • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                      C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                        PID:4008
                                                                                                                                                                                                                                      • C:\Windows\System32\SecurityHealthHost.exe
                                                                                                                                                                                                                                        \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                          PID:3324

                                                                                                                                                                                                                                        Network

                                                                                                                                                                                                                                              MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                              Reconnaissance

                                                                                                                                                                                                                                              Resource Development

                                                                                                                                                                                                                                              Initial Access

                                                                                                                                                                                                                                              Execution

                                                                                                                                                                                                                                              Persistence

                                                                                                                                                                                                                                              Boot or Logon Autostart Execution

                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                              T1547

                                                                                                                                                                                                                                              Registry Run Keys / Startup Folder

                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                              T1547.001

                                                                                                                                                                                                                                              Event Triggered Execution

                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                              T1546

                                                                                                                                                                                                                                              Component Object Model Hijacking

                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                              T1546.015

                                                                                                                                                                                                                                              Privilege Escalation

                                                                                                                                                                                                                                              Boot or Logon Autostart Execution

                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                              T1547

                                                                                                                                                                                                                                              Registry Run Keys / Startup Folder

                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                              T1547.001

                                                                                                                                                                                                                                              Event Triggered Execution

                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                              T1546

                                                                                                                                                                                                                                              Component Object Model Hijacking

                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                              T1546.015

                                                                                                                                                                                                                                              Defense Evasion

                                                                                                                                                                                                                                              Modify Registry

                                                                                                                                                                                                                                              2
                                                                                                                                                                                                                                              T1112

                                                                                                                                                                                                                                              Credential Access

                                                                                                                                                                                                                                              Credentials from Password Stores

                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                              T1555

                                                                                                                                                                                                                                              Credentials from Web Browsers

                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                              T1555.003

                                                                                                                                                                                                                                              Unsecured Credentials

                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                              T1552

                                                                                                                                                                                                                                              Credentials In Files

                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                              T1552.001

                                                                                                                                                                                                                                              Discovery

                                                                                                                                                                                                                                              Browser Information Discovery

                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                              T1217

                                                                                                                                                                                                                                              Network Service Discovery

                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                              T1046

                                                                                                                                                                                                                                              Peripheral Device Discovery

                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                              T1120

                                                                                                                                                                                                                                              Query Registry

                                                                                                                                                                                                                                              5
                                                                                                                                                                                                                                              T1012

                                                                                                                                                                                                                                              System Information Discovery

                                                                                                                                                                                                                                              4
                                                                                                                                                                                                                                              T1082

                                                                                                                                                                                                                                              System Location Discovery

                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                              T1614

                                                                                                                                                                                                                                              System Language Discovery

                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                              T1614.001

                                                                                                                                                                                                                                              System Time Discovery

                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                              T1124

                                                                                                                                                                                                                                              Lateral Movement

                                                                                                                                                                                                                                              Collection

                                                                                                                                                                                                                                              Data from Local System

                                                                                                                                                                                                                                              1
                                                                                                                                                                                                                                              T1005

                                                                                                                                                                                                                                              Command and Control

                                                                                                                                                                                                                                              Exfiltration

                                                                                                                                                                                                                                              Impact

                                                                                                                                                                                                                                              Replay Monitor

                                                                                                                                                                                                                                              Loading Replay Monitor...

                                                                                                                                                                                                                                              Downloads

                                                                                                                                                                                                                                              BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                                                              • Size 6B
                                                                                                                                                                                                                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 84d1049e195940ae4b5b771e2567a03ef6b9a57021b8ae35161da9c02c1a72c0
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              messages.json
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
                                                                                                                                                                                                                                              • Size 593B
                                                                                                                                                                                                                                              • SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              craw_background.js
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
                                                                                                                                                                                                                                              • Size 531KB
                                                                                                                                                                                                                                              • SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              CURRENT
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\CURRENT
                                                                                                                                                                                                                                              • Size 16B
                                                                                                                                                                                                                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Network Persistent State
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                              • SHA256 4ba8a0dd301af84b870aad37c540010a427c02d6b852e37c8ba83c11cf4796d3
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Network Persistent State
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 b7038756618e1698ea1d0237d9412cd53844c010849ff09d7d3fa2d03169f64c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Network Persistent State
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                              • SHA256 98cee48fbacad44d614e999b5f59f32dfd26499deffc3000fc1b7a66325b0562
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              SCT Auditing Pending Reports
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                                                                                              • Size 2B
                                                                                                                                                                                                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              TransportSecurity
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 3dfc3ed565508fae1407592e529ed499f476e763f6fc4ab3eee29eb9d6043896
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                              • SHA256 28c416fbe07f9b176e192c0fd257ddd53ba221e92ff0891618374de894ee2ed9
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                              • Size 12KB
                                                                                                                                                                                                                                              • SHA256 b00a6b2617ab655c7e44302a5b6eb5835167514b98ab2db553a0b389fc215405
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                              • Size 12KB
                                                                                                                                                                                                                                              • SHA256 e2397c7df8333e5e876b63f29b74fea73b0dbf4cd287c4c01d80dc695bf9851b
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Secure Preferences
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                                              • SHA256 a52ea16664341b45562138269cb5016548acc89c3d957ab69fa0352d4a739e63
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                                              • Size 96B
                                                                                                                                                                                                                                              • SHA256 72c56d4e3e1bae434b1b8a2cbb179b8d5114935a851fd7d909eebc0fe290dd26
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                              • Size 72B
                                                                                                                                                                                                                                              • SHA256 fdc622cec9b7ee0a804bdf4b9bf0778f2e78108dafa6a2a5b2680b8874582a4e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                              • Size 48B
                                                                                                                                                                                                                                              • SHA256 594349bbf42b7ddf797a40871789310a8c19fef4c529208649bfa5b417a4741c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              data_0
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnWebGPUCache\data_0
                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                              • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              data_3
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnWebGPUCache\data_3
                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                              • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              data_1
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
                                                                                                                                                                                                                                              • Size 264KB
                                                                                                                                                                                                                                              • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              data_2
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                              • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              MANIFEST-000001
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\MANIFEST-000001
                                                                                                                                                                                                                                              • Size 41B
                                                                                                                                                                                                                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 137KB
                                                                                                                                                                                                                                              • SHA256 542fda22c1602d3f24103bbd0992fa4512abb1e653f5ba057449a0072bdc8a48
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 137KB
                                                                                                                                                                                                                                              • SHA256 6962d5b3ff86c13a747d63b5d30e1e7bda7725eeb60df6f68eaf35ccb096ee20
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 136KB
                                                                                                                                                                                                                                              • SHA256 f62b0a7b51821d5054fc5dba913b8691ccfddcc020a76db25682ef4465dc9c88
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 137KB
                                                                                                                                                                                                                                              • SHA256 ce947fee14a203108f90ad3953699b33717282c06324a4c530a40f801c62b4e2
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 4KB
                                                                                                                                                                                                                                              • SHA256 a96d7c1379d397dc3b37d93c0fcac465f615c52993c45177d5a547443b3768de
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 137KB
                                                                                                                                                                                                                                              • SHA256 43d6d0c5d27f7c4f4fe1352d554cae2c91dcef3573f066fc82b4c5f8c4c31c90
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              f_00000a
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00000a
                                                                                                                                                                                                                                              • Size 346KB
                                                                                                                                                                                                                                              • SHA256 9be344d8aab52c80881980d24ba1435146143794aebbeb98bcae9a4b41f0bd16
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              f_00001c
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00001c
                                                                                                                                                                                                                                              • Size 22KB
                                                                                                                                                                                                                                              • SHA256 c3c0d3f472358aac78455515c4800771426770c22698e2486d39fdb5505634e1
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              f_00001d
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00001d
                                                                                                                                                                                                                                              • Size 22KB
                                                                                                                                                                                                                                              • SHA256 9194059997d722ec01e41980dffbff03ebe00808b1cdd164a7fd18a561bc312a
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              f_00001e
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00001e
                                                                                                                                                                                                                                              • Size 28KB
                                                                                                                                                                                                                                              • SHA256 23e522d25162e1adf0c5680bc82ebb763003e96c6b696feb5ee3ba6525f7851f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              f_000001
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
                                                                                                                                                                                                                                              • Size 162KB
                                                                                                                                                                                                                                              • SHA256 a5c9fc7cd14c19245aa8e356a7ac9c69d1e6f929ecd1c99e1958093be042acad
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              136.0.6008.22.manifest
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\136.0.6008.22.manifest
                                                                                                                                                                                                                                              • Size 225B
                                                                                                                                                                                                                                              • SHA256 f7cf7f8bc1e2a84858fc169d027458c9fa565afdc94ac9f58891f39667e05960
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              150x150Logo.scale-100.png
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-100.png
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              150x150Logo.scale-100_contrast-white.png
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              150x150Logo.scale-140.png
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-140.png
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              150x150Logo.scale-140_contrast-white.png
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-140_contrast-white.png
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              150x150Logo.scale-180.png
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-180.png
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              150x150Logo.scale-180_contrast-white.png
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-180_contrast-white.png
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              150x150Logo.scale-80.png
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-80.png
                                                                                                                                                                                                                                              • Size 827B
                                                                                                                                                                                                                                              • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              150x150Logo.scale-80_contrast-white.png
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-80_contrast-white.png
                                                                                                                                                                                                                                              • Size 799B
                                                                                                                                                                                                                                              • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              70x70Logo.scale-100.png
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-100.png
                                                                                                                                                                                                                                              • Size 781B
                                                                                                                                                                                                                                              • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              installer.exe
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
                                                                                                                                                                                                                                              • Size 8.0MB
                                                                                                                                                                                                                                              • SHA256 3a7cd7023d780aee3c44e7502e0446807abf3f3558e1074f001e7dada324ec7a
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              installer_prefs.json
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 08eb6f558b1def9a9c1f4bcafed6af19547d8d7f826fcc076906cbb2aaaee50c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Opera Browser.lnk
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\034b4e94-7e18-4104-b3ac-b14bc2fa1354 Opera Installer Temp\opera_package_202609240158261\Opera Browser.lnk
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 f658700a260ca527cd6501c2d73f4fa8a193ae8f4135d258f4f0a50745fbd22d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              additional_file0.tmp
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\034b4e94-7e18-4104-b3ac-b14bc2fa1354 Opera Installer Temp\opera_package_202609240158261\additional_file0.tmp
                                                                                                                                                                                                                                              • Size 2.9MB
                                                                                                                                                                                                                                              • SHA256 3f73fcad3e4341457014e2d3b6f2d8897626292ab63bcfbed20cc9156bc5059f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              assistant_installer.exe
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\034b4e94-7e18-4104-b3ac-b14bc2fa1354 Opera Installer Temp\opera_package_202609240158261\assistant\assistant_installer.exe
                                                                                                                                                                                                                                              • Size 2.4MB
                                                                                                                                                                                                                                              • SHA256 7759a3f4d694115a391420ae1ca24edeafe6f02ee4fc2dee9937d8a4b804a608
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              dbgcore.DLL
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\034b4e94-7e18-4104-b3ac-b14bc2fa1354 Opera Installer Temp\opera_package_202609240158261\assistant\dbgcore.DLL
                                                                                                                                                                                                                                              • Size 196KB
                                                                                                                                                                                                                                              • SHA256 e7e395f28ceb05ed3519970190ec4f72a7489609acd1401fb6b41582cc1dcc3e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              dbghelp.dll
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\034b4e94-7e18-4104-b3ac-b14bc2fa1354 Opera Installer Temp\opera_package_202609240158261\assistant\dbghelp.dll
                                                                                                                                                                                                                                              • Size 1.8MB
                                                                                                                                                                                                                                              • SHA256 27dde9b1136e5c13cc16b7cfa8945a9a9f7508ad91f124961eabed06b2886c4b
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              installer_prefs_include.json
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\034b4e94-7e18-4104-b3ac-b14bc2fa1354 Opera Installer Temp\opera_package_202609240158261\installer_prefs_include.json
                                                                                                                                                                                                                                              • Size 820B
                                                                                                                                                                                                                                              • SHA256 f20f08d7dc827c7cdcf76d346b91c8139470f743363075582e431f38a71ba901
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              installer_prefs_include.json
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\034b4e94-7e18-4104-b3ac-b14bc2fa1354 Opera Installer Temp\opera_package_202609240158261\installer_prefs_include.json
                                                                                                                                                                                                                                              • Size 835B
                                                                                                                                                                                                                                              • SHA256 cb415cd58ac1a9f0314dba0d53e549e607a6698058eaf41e6e7004791e5c3fdc
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              installer_prefs_include.json
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\034b4e94-7e18-4104-b3ac-b14bc2fa1354 Opera Installer Temp\opera_package_202609240158261\installer_prefs_include.json
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 07dca2b579ee5b74576774cdc2d7ce3f6cc053961680dd648698f2737940e8b5
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              installer.exe
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\7zS497A665A\installer.exe
                                                                                                                                                                                                                                              • Size 8.0MB
                                                                                                                                                                                                                                              • SHA256 7c9c1c49c414174606f75b1a24d4c5b0b1db84fa522d06e827d9d32e3d2e0e93
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              messages.json
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4056_1802544928\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                                                                                                                              • Size 450B
                                                                                                                                                                                                                                              • SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              favicon_opera_one.png
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4940_1495254230\CRX_INSTALL\favicon_opera_one.png
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              reader_mode.js
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4940_1495254230\CRX_INSTALL\reader_mode.js
                                                                                                                                                                                                                                              • Size 112KB
                                                                                                                                                                                                                                              • SHA256 17f8a5c1d70acee668cc6964317d88802d4409c32b0d7e292b95e1de8ddb16df
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              spotify_frame_interceptor.js
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4940_1495254230\CRX_INSTALL\spotify_frame_interceptor.js
                                                                                                                                                                                                                                              • Size 5KB
                                                                                                                                                                                                                                              • SHA256 895ef6ae0efde6f5e8af23d1acbfac4a5351bda31c89d2e64c05f2de0181dd56
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ask.html
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7284_681664657\CRX_INSTALL\ask.html
                                                                                                                                                                                                                                              • Size 370B
                                                                                                                                                                                                                                              • SHA256 5e4a8f6c4cd658ecf912aa6a55221ee09b5b0f4f466c3d7b233ccb5a5b1e3dd6
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Icon_Light_Neutral.png
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7284_743045442\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              settings.dat
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                                                                                                                                                                                              • Size 40B
                                                                                                                                                                                                                                              • SHA256 7f121609985c19c23d9d632455be5e68c026c775534d438372293026703f636e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              750e6ff1-1b0f-4dda-9bdb-286dbc71307b.tmp
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\750e6ff1-1b0f-4dda-9bdb-286dbc71307b.tmp
                                                                                                                                                                                                                                              • Size 171B
                                                                                                                                                                                                                                              • SHA256 907a09ba55861cb19e04c0fceb7574686a9b78f1f8b8ee0ce1c90ebad84e4f6e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Bookmarks
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                                                                                                                                                                                                                              • Size 30KB
                                                                                                                                                                                                                                              • SHA256 b09c815c510079125ef49e4f2d91f2e2b7385f14e1de08f8e98475cef336bd0f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              BookmarksExtras
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                                                                                                                                                                                                                                              • Size 169KB
                                                                                                                                                                                                                                              • SHA256 d84d6300f67c2786c06396e2303c6d72e798e5a48d9c8ee226a246e455af7031
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              70f25ff2-904b-405d-9467-3e22f32a188b.tmp
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\70f25ff2-904b-405d-9467-3e22f32a188b.tmp
                                                                                                                                                                                                                                              • Size 48B
                                                                                                                                                                                                                                              • SHA256 c4c24d1ea41e960d5caef2238473d14a3c6edf1cd030262c5e154ce85dc84671
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 b16b2aa2d6e6929525e17c6c8766304a49b36504d24688330594b6b5f3961ec3
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                              • Size 336B
                                                                                                                                                                                                                                              • SHA256 425582bd82d0fabda763fc05544674a6c33231d73f21173af07f04c203dd8d66
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              main.js
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.8_0\main.js
                                                                                                                                                                                                                                              • Size 47KB
                                                                                                                                                                                                                                              • SHA256 9cc5e1dd96d76735499257c52d632a0a9e17ed4da929035067dadcc586000335
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              logo_128.png
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_128.png
                                                                                                                                                                                                                                              • Size 7KB
                                                                                                                                                                                                                                              • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              logo_16.png
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_16.png
                                                                                                                                                                                                                                              • Size 653B
                                                                                                                                                                                                                                              • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              logo_32.png
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_32.png
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              logo_48.png
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_48.png
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              logo_64.png
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_64.png
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              service-worker-loader.js
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\service-worker-loader.js
                                                                                                                                                                                                                                              • Size 49B
                                                                                                                                                                                                                                              • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              computed_hashes.json
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\mfdhdgbonjidekjkjmjaneanmdmpmidf\5.6.6239_0\_metadata\computed_hashes.json
                                                                                                                                                                                                                                              • Size 48KB
                                                                                                                                                                                                                                              • SHA256 52f083cabd64cfcca1860b3043ef8c17a1d5960474754efe3c23a50261d41cc5
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              verified_contents.json
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\mfdhdgbonjidekjkjmjaneanmdmpmidf\5.6.6239_0\_metadata\verified_contents.json
                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                              • SHA256 5881dea9b398231599bcaa80cae8c35a6aa66149f0b97fbecf2f12185e2af6c1
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              background.js
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\background.js
                                                                                                                                                                                                                                              • Size 87KB
                                                                                                                                                                                                                                              • SHA256 b199d4f989c63947c53a9d07450038cfe274b7a10e8cc7d688c4049ae14ef63e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Icon_Light_Neutral.png
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Neutral.png
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              popup.js.LICENSE.txt
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\popup.js.LICENSE.txt
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              rules.json
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\rules.json
                                                                                                                                                                                                                                              • Size 839B
                                                                                                                                                                                                                                              • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              0836382b-e032-4e26-b8b5-35205a6654ec.tmp
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\0836382b-e032-4e26-b8b5-35205a6654ec.tmp
                                                                                                                                                                                                                                              • Size 27KB
                                                                                                                                                                                                                                              • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              1801ee61-7507-494c-8393-9f91935fb13c.tmp095cb02a-9cbb-40a6-8167-078fe2229a67.tmp
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\1801ee61-7507-494c-8393-9f91935fb13c.tmp095cb02a-9cbb-40a6-8167-078fe2229a67.tmp
                                                                                                                                                                                                                                              • Size 27KB
                                                                                                                                                                                                                                              • SHA256 7aca076b4b1dccb2457284a51bddb5c43eacf93224ec1f9aedcdefb1fbc9b087
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              3d87ccef-96ce-4979-90de-be3c813dfae0.tmp
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\3d87ccef-96ce-4979-90de-be3c813dfae0.tmp
                                                                                                                                                                                                                                              • Size 27KB
                                                                                                                                                                                                                                              • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              4b2d92fa-2e15-4b5e-8023-78620288c74e.tmp
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\4b2d92fa-2e15-4b5e-8023-78620288c74e.tmp
                                                                                                                                                                                                                                              • Size 27KB
                                                                                                                                                                                                                                              • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              53a73751-4bc2-49d0-b613-c8d2c4d2b054.tmp
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\53a73751-4bc2-49d0-b613-c8d2c4d2b054.tmp
                                                                                                                                                                                                                                              • Size 27KB
                                                                                                                                                                                                                                              • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              9cfb4250-7b4a-4043-9529-7037abe4ea20.tmp
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\9cfb4250-7b4a-4043-9529-7037abe4ea20.tmp
                                                                                                                                                                                                                                              • Size 27KB
                                                                                                                                                                                                                                              • SHA256 3a9c655a88437e331f50a23bb40cb1a3de86277cb1a9488c81c426598cfab0a3
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Network Persistent State
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                                                                                                                                                                                              • Size 111B
                                                                                                                                                                                                                                              • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Network Persistent State
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                                                                                                                                                                                              • Size 15KB
                                                                                                                                                                                                                                              • SHA256 bf69775c3baec4a881a6319bb40f2199f68856c05d978393d35e57e5ade8bb5d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                                                                              • Size 18KB
                                                                                                                                                                                                                                              • SHA256 4dc68e20af1059cc4e86366c26d4a4b963dd090061daf50b32c83001a71eea55
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                                                                              • Size 18KB
                                                                                                                                                                                                                                              • SHA256 e58f2e818a1e9b6eeeb5fdf50a00835f55fd51be76343ed30156f244acee4526
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                                                                              • Size 15KB
                                                                                                                                                                                                                                              • SHA256 c7fb544c0e6ee3fab451b8d36c3ec95e64c78bbac2c55ee47be9392876cec1dd
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 f0beeff60fc1d2abd195fab2236fa9984244f5cdba0f4ef0be89bd8042b5b6ab
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                                                                              • Size 15KB
                                                                                                                                                                                                                                              • SHA256 54d1f87a37d1d42edb215cce255409192be4cdc9dfd441c0914b828c78520ca1
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Preferences
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                                                                              • Size 18KB
                                                                                                                                                                                                                                              • SHA256 71616aeb1a1ae46481ef8487c8fe70f84638047fa519f6a018acff8cbba3874d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Preferences892a1b1e-6eb2-4b40-ab75-654e7456f6c9.tmp
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences892a1b1e-6eb2-4b40-ab75-654e7456f6c9.tmp
                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                              • SHA256 b603ff0d3f22facea453adea143b8bac7ef7ffaed3eccb570cdf98c1682f6b64
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Preferencesdbf93405-eac2-4879-a578-c1a0c608e7ff.tmp
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferencesdbf93405-eac2-4879-a578-c1a0c608e7ff.tmp
                                                                                                                                                                                                                                              • Size 18KB
                                                                                                                                                                                                                                              • SHA256 ae99a5832465f62526e396aaeb6d9a852b3c712709513148b00730ec10a6dc8f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Secure Preferences
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                                                                                                                                                                              • Size 110KB
                                                                                                                                                                                                                                              • SHA256 f6bd51c6bddff8f6d23c546a292e603eae4f7b84305e91af60fa6d01e72b0be7
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Secure Preferences
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                                                                                                                                                                              • Size 82KB
                                                                                                                                                                                                                                              • SHA256 db822e35ba759de509312103c211773c76b7731c7f570272c14583537bbb628c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Secure Preferences
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                                                                                                                                                                              • Size 108KB
                                                                                                                                                                                                                                              • SHA256 66f2324f507855743a3237c61b87f3728b150ba37acab69ce13b37b38cbd76e9
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Secure Preferences
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                                                                                                                                                                              • Size 110KB
                                                                                                                                                                                                                                              • SHA256 43de500a319d6fb7b7003372ee33b0065c0eac5455545bb9e2f106d26130ea19
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              08b99d499107ba17_0
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\08b99d499107ba17_0
                                                                                                                                                                                                                                              • Size 47KB
                                                                                                                                                                                                                                              • SHA256 c95260a298492531548d16c5f419db78231ffb0f9bef2929367987cda35f9d5e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              08b99d499107ba17_1
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\08b99d499107ba17_1
                                                                                                                                                                                                                                              • Size 112KB
                                                                                                                                                                                                                                              • SHA256 08603e11538675536885a858d98904a8f41d2890d67a6fc42ebcc3c28bd88e64
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              45c2f2fcb9072b47_0
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\45c2f2fcb9072b47_0
                                                                                                                                                                                                                                              • Size 355B
                                                                                                                                                                                                                                              • SHA256 0d6ffb69925e77a93dd2ba918b8eb74dd4a7a7c434402e109aebbdf31bf63e89
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              6c038e3570d6abf1_0
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\6c038e3570d6abf1_0
                                                                                                                                                                                                                                              • Size 87KB
                                                                                                                                                                                                                                              • SHA256 13b925cbaeb9657251e240275305f92427455e7f0f7960e7418c37d736ec1a18
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              f76ccbbbd72a0391_0
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\f76ccbbbd72a0391_0
                                                                                                                                                                                                                                              • Size 609KB
                                                                                                                                                                                                                                              • SHA256 2fe22381cc86d3d9424e44950ee3a13a8c22c4566e805eac0a1e2232f7a0e9aa
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              f76ccbbbd72a0391_1
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\f76ccbbbd72a0391_1
                                                                                                                                                                                                                                              • Size 1.4MB
                                                                                                                                                                                                                                              • SHA256 cfa70a76f320b981a0914f4b17e06bba73d661fac5a6ceaeb5ab3ea7503a3674
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              index
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index
                                                                                                                                                                                                                                              • Size 24B
                                                                                                                                                                                                                                              • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              b70b4f45-ba36-47b2-b15d-72fb2f0844ff.tmp
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\b70b4f45-ba36-47b2-b15d-72fb2f0844ff.tmp
                                                                                                                                                                                                                                              • Size 72B
                                                                                                                                                                                                                                              • SHA256 5ac3a020fdce753d8178d1dd94b8d7e8a411b7b78e206643b4ea105896439f05
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                              • Size 408B
                                                                                                                                                                                                                                              • SHA256 b045bd8314280db986993edcb18421914b82fddd81d808985bf6fee647bcca77
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                              • Size 96B
                                                                                                                                                                                                                                              • SHA256 73332fb49d1ec055de34ec035332b3f1279c2464f68f0b4dae6a5b68a6ccd6a3
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                              • Size 408B
                                                                                                                                                                                                                                              • SHA256 14199cf92b0fd1244abe556799e76059af9c3736b8d40139a82fc7be64b2c157
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              the-real-index
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                              • Size 360B
                                                                                                                                                                                                                                              • SHA256 8cf72b46bc0a4f42ff9428018924503310cb0e8f76641da3bea870073c1ac597
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              df764839-44f4-4da2-a70f-0e94c8f45b4d.tmp
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\df764839-44f4-4da2-a70f-0e94c8f45b4d.tmp
                                                                                                                                                                                                                                              • Size 477B
                                                                                                                                                                                                                                              • SHA256 9fb10ec955b9a4b2cc673aecfca3d5606ecd93d889aebfa301206f06356b6e19
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              fe00e9af-681d-4f26-9fc7-7a9a413cec6f.tmp
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\fe00e9af-681d-4f26-9fc7-7a9a413cec6f.tmp
                                                                                                                                                                                                                                              • Size 477B
                                                                                                                                                                                                                                              • SHA256 b1e3d1f398b9c949fdcbf789595620babcf06c28268e88aaf49a6528c321f191
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0541f789-5aa7-4cec-90bb-09156b180c8c.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0541f789-5aa7-4cec-90bb-09156b180c8c.raw
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 c0edf1b726aeba3dd8644b3788e523b6ca78d66d63487369c9290295fc317f53
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0541f789-5aa7-4cec-90bb-09156b180c8c.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0541f789-5aa7-4cec-90bb-09156b180c8c.raw
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 8b054c872bbd58e19525bb82bd597f87e96c0fc15885dee4363e48b62b7960ec
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0541f789-5aa7-4cec-90bb-09156b180c8c.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0541f789-5aa7-4cec-90bb-09156b180c8c.raw
                                                                                                                                                                                                                                              • Size 893B
                                                                                                                                                                                                                                              • SHA256 1f3feb0d9cfb9dad7253cc96e606100799b5e212c9103a0c8ebd1d09f85e70f4
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0541f789-5aa7-4cec-90bb-09156b180c8c.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0541f789-5aa7-4cec-90bb-09156b180c8c.raw
                                                                                                                                                                                                                                              • Size 589B
                                                                                                                                                                                                                                              • SHA256 d1affc266a7fca55c288d511805b9ffdf14edd713ba86265ceb68102038ec392
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0541f789-5aa7-4cec-90bb-09156b180c8c.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0541f789-5aa7-4cec-90bb-09156b180c8c.raw
                                                                                                                                                                                                                                              • Size 717B
                                                                                                                                                                                                                                              • SHA256 29f89a1fe364be9e2c8644a67240ad739caf5875d9597c30ad10cdaf912ca669
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0541f789-5aa7-4cec-90bb-09156b180c8c.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0541f789-5aa7-4cec-90bb-09156b180c8c.raw
                                                                                                                                                                                                                                              • Size 877B
                                                                                                                                                                                                                                              • SHA256 6dde5e9eee4750eb97cdd2b14daaca8cb0c613f7444bfddb9e74b9e249e43d48
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0541f789-5aa7-4cec-90bb-09156b180c8c.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0541f789-5aa7-4cec-90bb-09156b180c8c.raw
                                                                                                                                                                                                                                              • Size 893B
                                                                                                                                                                                                                                              • SHA256 bf0ceb10dd55e019baec36136bb21ef49a3be26d0ba21c5b77c298c6134012f6
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0541f789-5aa7-4cec-90bb-09156b180c8c.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0541f789-5aa7-4cec-90bb-09156b180c8c.raw
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 81011619ef1bf5f507909d366b5c39f101256309467d62781bf9ac47b4a7f277
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0541f789-5aa7-4cec-90bb-09156b180c8c.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0541f789-5aa7-4cec-90bb-09156b180c8c.raw
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 e05b6fc10336e6a9e2745952a44dbdc5a3c2596de828f540181f19caecb075c3
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0541f789-5aa7-4cec-90bb-09156b180c8c.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0541f789-5aa7-4cec-90bb-09156b180c8c.raw
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 7f60cd832dc606629fd4352d7bf064d3e404c57603dee566603c8215deaf4ea1
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0541f789-5aa7-4cec-90bb-09156b180c8c.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0541f789-5aa7-4cec-90bb-09156b180c8c.raw
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 3547b07007b5271685f359911ee59bff4837e8f1a2a10cbd829d395153cdc558
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 15KB
                                                                                                                                                                                                                                              • SHA256 fae3ef71b36cd4188a1ae9c22da349a19c9b01c8cf636791e6edb9e725402f9a
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 15KB
                                                                                                                                                                                                                                              • SHA256 8c257994cbea74432904c4e01c7bceff70de36e64b783628ccf437dc9cfc772a
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 16KB
                                                                                                                                                                                                                                              • SHA256 69ffd943bda7059af13eea1650d39a06786054b8ebc6f799fa8d2b4ec42db2ba
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 db4d2c8fa689488a11f4f8438cc534f14f32a730b878b8f2c773fa79744c4a84
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 9ce3ada50764232a0b531c9b083c61770715f01398c63ff510d9cb10813012c4
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 bd45acf29411258fb408fddb2c68eaa68aa16082034a0310759f0085349049a1
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 16KB
                                                                                                                                                                                                                                              • SHA256 cd5ef823cc2d366f07cb93e0b9e549b8bf05632a2826e82d1a6da90beab25f41
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 16KB
                                                                                                                                                                                                                                              • SHA256 227e54fb1c89ebcc17d43f60e14a3d6b9c7dd2602bc226c1e1b87188da135bb0
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 16KB
                                                                                                                                                                                                                                              • SHA256 2b4d4e38e8aec3db3cf91f0efac1c24a36e7e397b1989d8f9ca9bcd5a91d9cb0
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 16KB
                                                                                                                                                                                                                                              • SHA256 b4bccefce71025b01cc6508a7c3f5da48d60c03a7399fcc90448b45223cdb22c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 16KB
                                                                                                                                                                                                                                              • SHA256 ecd01eebc79f7ece298ae98f7f558ca405ba1d237cde2e9bf9c3b909298e3944
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 0b2d1e2a2490949059de256b8ac3867bd2f893a15d9e2964dcf86fc7f50a6d52
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 2a3c0abd66ae8723d39dbd27f6f0c2de063435bf535aa2926c52cc17e7646e2a
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 6c3fce028661b4151c37f44ad3691fa7848534ce6396c4c06cbd0d497c0c5fc5
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 235e3a2d4186ca7724d98ea7a57b693570dc404b6682769b65bf869adee0245c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 d99263ca187e417fcf53d96474a04b3df54320b7bc7ad0ceb1212f69d14cbfdc
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 0d1d308f26695a4c652bff708165e33e31c98ec198c9d800f7fb51e3762f6715
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 f80fe2c5310c0f747cd5c77134f450c7292878063ad3b1496b45ba33bfdeb412
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 2a6bec3c2e987c8456f87fc527b71deab5c07e1c71e5ce5a6e3ed71e68bd677c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 186154b036ec6ab5165f47668d5ac0741da3b730e829d1b5f8c9db73d9bc73b4
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 88793a5393149e54eea14c22114d518e2167dfe9e0e97df14f2ff3ec2c340e2e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                              • SHA256 6b726fb5379891b47a0e559f16e6a935cc8abc7cbc42056659896c9edda284f1
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                              • SHA256 e572e73867ddf301a1c6d90827de7312835ba743216c1d763dd4465ce13b348e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                              • SHA256 e1d2a0043c221725efdf6f0a0e70ebf607c84972e3328935b58503e1b9e460aa
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                              • SHA256 da5afd598ae6e87f32ccda69144590cd9a3a3a185174d289c90580f13eefe8d6
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 12KB
                                                                                                                                                                                                                                              • SHA256 977413b1909c1adad1d1fa2a72b219d029e46c6dca690a48a1a4a99d7a53e0ac
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 db86f25ba63be4e038ad9102c1096aefb02632022835b7cbbaf1b6f88231aa37
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 ec822c5cf8dd0b424d3765de44b090b2921eaa5090f7b7885cfc4008b136579b
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 15KB
                                                                                                                                                                                                                                              • SHA256 7a8230fb094600a37c3f327ea8dabab2067e778ddd21736643100b488518ac49
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 16KB
                                                                                                                                                                                                                                              • SHA256 46391b2a418cec1c2d40253a181d5c729e51c5a3611b45ef811e2a6e6fd630d2
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 16KB
                                                                                                                                                                                                                                              • SHA256 2b924b66163dbbe8f47111bed88a58e5b25f1f4b0ab96c71d699a5df07b310a5
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 16KB
                                                                                                                                                                                                                                              • SHA256 395216ac6a2ca837587c30bd8f6030091b56b67338e06b526febc31dfe7b5925
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 f8fb13e3e8a1f596595d609a8f603624606bce282617300bdde174f7348ab92a
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 edfc6fdcae67a22533aebd918a1193033cc44255fe6ae57fd4edadd964f56f9e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 c0af000a3c55d6ac63804b098f48f8e5d3922696f43c55be511aa82b7d95c896
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 31cafc252f5f85e2eef165f2d315c20d8dc76d98306e8ca535b2b2b23711a57c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 f7fb7c66fb92dff2d87e1329e88128ecac9aad0d1ec97e10aff688a212bdd56b
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 dfe98ece5cfef7cf497fe097ef5a4fb244942a9b84d7f0762c78fdfc06b822c1
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 5384941918f7613974e1a0dcb0fdc18ac4dd6a07776da0604c1d34c3a69dfe8f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 5a1654c4d46d11dc90e36fbba4a97eb5acba0598445f270a15e5efcc5af118ce
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 225ac10da739d1b4c5f9626bcaa269f5c1f1839c6c6d162c066d43b8125a200a
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 30a0b822800401f0b3a5e5790f0722a0f165f4e3ed7ac68217a5a6fb66ed1be2
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 e8ceda705c9c35fa5806712fbc22859be45bf9e3d61a9fe1c955d10ecae8be46
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 1d3d3074764e4d0dcc1baac06e44e12a68ddf0afc9859fc36cd5385adce2a4e0
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 b7a5390b1339ac95e6bc3ee4d3c6fce60e584b3ed1f0311eb5536a8aa226a9d5
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 7KB
                                                                                                                                                                                                                                              • SHA256 6458033d7ea7fcf1682ab1f307cb0fba6c42d175eaedd59b16ab79b141527cf0
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 7KB
                                                                                                                                                                                                                                              • SHA256 c56db88d9e95eed24c502789a7eeef380aa3357f20296521b18848c0e80e9ab1
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                              • SHA256 91c45c71942d5dcbfb5fe0b5b879af45e7e33542df43db9c21c2df03181e4605
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                              • SHA256 99fada1a25304ddea2f727ff6444475591f2e2cc78d09c691bd6440813168c76
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                              • SHA256 e8d5ec4d9b13302e205d4ac802db00840bb9d9d1bca80cc310d69ec8691347be
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                              • SHA256 3f6cc0dd731c0bce43e51a1b1501848f120214f084b7d2cc0b369447f74e06be
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                              • SHA256 1778f82390b1b6c527a7b7fbf98947bb329080bd187adad56da193a327305071
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                              • SHA256 71d6915bb74b7be3725f788a6042de4b9a0a67c5e00e1d5837f47bb13fbf4bb6
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                              • SHA256 80ca8df4adc1103eb2d031cf56ac93d3f37526a8bec8cca41f7ad3b51c3401bb
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                              • SHA256 f7b2299ddce09ebfc39893ee33e4d98e558de3a7836c4098d5cda56acc682807
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                              • SHA256 df29bddaa1e3fa36bc3dfa4633a86f746493bd9cda369130ea489f6896090f1e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                              • SHA256 bac4c35bea52d1ab358467211dc56d7c20249cb523fc142f45e072f16454f2d6
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                              • SHA256 e8350adc9bb171166af969dd9b2dda7fe7e7690d88be6e317471e11305cb190d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                              • SHA256 a673a53c2e0842143e78efca68ef35977ea776fc332f118ecd5df8212dd2bcf5
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                              • SHA256 11ea50ae5ae0f921cb1dd457bfba8f73beab90ab12056260d332eb2d252feb29
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                              • SHA256 ccab6a909f393e93d85ea77eddecdd386c84b45a1d050c9243e8e9284cb73e46
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                              • SHA256 ff6b629dfa452e52a4a962c876bddb74f14bf6b60a07d7527b31b61562a1c57f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                              • SHA256 e417bd95afad3b12fe37133acd733acf8db2e958741b208f46628b4ecab1e9c9
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                              • SHA256 6d58c15171cf31afedfef32d960746812ca09da887e6f6769329077c55325136
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                              • SHA256 9200050cd778ccfb7ca5bdf52c01cffd3bff24943d7b88593fa7890ce059897d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                              • SHA256 984c063243bd7a4f774229a54337f129076c7e0e74f9e00cf6119f417c944d36
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                              • SHA256 10a72f0082367177ec870e6fd821a17b5987f104b9875908f6750bf3fbea9149
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                              • SHA256 84cc1df1b6bb5b7dfd0d3f66eda4b5e304e0effbcc6b099c2c7fa021e52b93dc
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                              • SHA256 c8cdc815cdb2ba7c7240e6102e4f6caec14ad27af16117770b95bc50461b397e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 12KB
                                                                                                                                                                                                                                              • SHA256 5a85e02f0a48d8543100ee29f4c10724ec1345d172a3ead0ae4bd428eaa8cbca
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 cf6e667fd5beeb0661cb742e57b4697eab7ec2b0ca60b40fc78961843dc00667
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 9568ab5990d32222b836b21dfc8da818c7e55469337d42f90ebd1609e98b671f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 d8e5e06fac0b12282b0d2b300eb48eaaad027dc604f148e089558aff4409c1f7
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 a2920a856d0e68b778d2f145f14a5c33353dac4efc90be48f1348bcc16a39401
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 2d99e1b0b821aad8723e768d1b39b56cadebb8a20f8f8138ba8c547bd61cdd86
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 ba223976ba5b0830b0ca63465de01da8aef35cceb66ae74a0726ad44dd7e677b
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 9a2088f702fbf58eb08b50ddaa1ebb33546ffd5ae7b5442e58db0132cfd70414
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 048ec1dd68a00f6ffca533f55d3d127fbda6246d6501c188e6bbda54f1ff6589
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 97448427bb603eaa3890f7ab3c3dde682d459a6f6f24df26f267411065987e8e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 cabeae3730d56827dde2bb6d62524dbbd9920b6cfa0e34cac0da375077ffa264
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 72ac0d66c8f772490b129aad9ba99f92cd7d798a9229c6555688fca8ec4faa40
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 06288c2ceeddf509a4fa9cb3e8ff536f57203505c0cf2286a5fc967fe9cdca9f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 c86cfabad955703969d2facd44ee1cf9a9b50a0948fc46b406dba541181dcccc
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 6192bd1445244b5cb1895e5a99c0e554f29d16209e6187121ba69d74d18f58b1
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 aaa0131bd58dd34aa64186f11f4b8d8fee351e16704afd5b0cbf943bfccf62e1
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 1a5b36239a423a0145ededfed6b3a37c41014112279f340d4df025133d9d8556
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 16KB
                                                                                                                                                                                                                                              • SHA256 4cc138e7a234f3e742bf7ed25d57059bf7a317d99d3628676d614363320c6e30
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 16KB
                                                                                                                                                                                                                                              • SHA256 7828357508f92253a03e75d3c0646b80df84fd4f9f096543c00fb38234af3bcd
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 e04f92de833c235ce66e22d55ec1bd2b18f9e72fe23c61aa3bb95680ab477de8
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 12d2558f67c572361f81a73c844301e9c7b6c2d76562bc56aec22cdd62ce44b9
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 1021B
                                                                                                                                                                                                                                              • SHA256 7506b3791463282e710ae2979823a709de80eda35840b2c8c5ae1d1928d68624
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 bb8d0b660907289b1be594bfae0a9c179d2afca402516a469cfaf1d8c0344e71
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 9c49e1d2daf194aaa0f2a16fbda439bdc5df0b8e6cafd1550496a52fff4c6af8
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                              • SHA256 450702a28c65b24cdb2aa1a952caa1ef318939b5b7fab4d697da8eff3c89e6d7
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                              • SHA256 055fc63a2f57a8fedc49cb8aec58f688f44d2a2f801c41e28295b79635720aa9
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                              • SHA256 fd96b0b24ebecbcbad42d6f25f02130681f1f10ed77dec3a92c61170352bfc4f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                              • SHA256 7e1335558a1e186657caeebe7dbbcdfab08dfba3fbffe6729c52280a97b17754
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 12KB
                                                                                                                                                                                                                                              • SHA256 a8750ac56590374a87402410184e1fa0ca4b9309eb078bc047ed092a86916776
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 22b84c964465c967382ce7093adaad6e39a5326c3e92a92983a702a95f617caf
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 598dbd816e96d067c98cb4f7604e04ed6efd5be4c9004f5a409ab73ac5aaf39b
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 9e8d7e6f4d02414e02b8b77d317449787e39344ec98bc844339940808e1fab1c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 1f6cd5c1bf5047c7eb3df2e768bc0c9305ffb4a05acceb4d0b63879ace413ad9
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 74193681a68ec19d7f1b9f1a144f784d98628b5391e0eed0f45aa4179e0bb7ee
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 e3b6a1eed28bb510edaf0a169e10aa27fc63fd41a045cf4e57522b7b6e9e1cb2
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 16KB
                                                                                                                                                                                                                                              • SHA256 be718388b9dec592de862cb7312be910b473867a0712ff8865e390ca74b205ef
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 16KB
                                                                                                                                                                                                                                              • SHA256 5e40ae0a02e27c2e5aff9d98f2ab5c61138563a6e3712f1acdf3ff405fbdc432
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 1f6f5fcfc168bf9a2454393c06282d5bc8994a92a9a8825d975d923f5085de2b
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 e8c806f3d680f106b13e9602dae7c31317e0f74aa2c60f8fae4fc05a136efe45
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 589B
                                                                                                                                                                                                                                              • SHA256 d71c5aa781eea48e70f6e2db905e54760853143b7d6fb66f55aa8f1ad5280933
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                              • SHA256 644aef09383d730859dc04772e74adea495eef69f8e7b6294e429a44f543b85b
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 37256a604d960cbb95382ae66e2546cdce6348fe05d2608c7e778bfde281012a
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                              • SHA256 276428586505e4c2884d1285e2aa80c31888a7bffc11313e908eb8b16e76938e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 8452b813ce1670c23a0484a8829670f9e2d4b4bcb7a0593e57c8e62bd6441b04
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 485b8045f4a6144e3e59c3a93d899b7413ca9224c1ebdc07b5dc6873b4df7741
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                              • SHA256 2dda69154dcf46e0cf32cd04b466835496e36ffd29c8843980c3a828c6f8ce97
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                              • SHA256 11fa11671f693780689464583ce7d91558b030b7425b5c690abcf8dc25bf2ebb
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                              • SHA256 dfc7ddf5800afe87754c27f6a74ca819e73df4cb9d98d3f8b80ead0855542478
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 12KB
                                                                                                                                                                                                                                              • SHA256 244d43a28759e3f0c861125bd614532dde4d11ed082c63f24f3b87c54dec4dd5
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 dd0b64d57beefc0fa115dcff11679f507e86417332665a67e86e921a0ed644f4
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 19246aee525d06a74d65653d423bc64b7388c46cc67252e571e44f123d032854
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 81acc5c6b0604a6203412aefb5807b2246dac7c97c7344c047740f52d567889d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 15KB
                                                                                                                                                                                                                                              • SHA256 9b4ca449a53f7fc2171627c9d9285f410299afa5901a6ad9a74e6633f8f68735
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 8452e0222488410ac1f0209324f6321845c28b11453d203a2154a796a36f5e43
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 e0977200634f2d7735f3351c2864bf36c2d75bd04617cff0536e33ca8aee848b
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 9efc5f16c85f02b41f9cb8505e70e6e8ce78b7f4ceb2505a76ebad28be6971a6
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 ffc2795bd8d95492bcad36aaeaa63b30693bb0e47d2f1f06c74bd1ffff4e0889
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 845B
                                                                                                                                                                                                                                              • SHA256 1c4cdb95bc8caf6ecbeaa0220d73156e9b33f1682df0d289ddebb6a494848050
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                              • SHA256 9312e2c6d9a3c3e66642021e9f84c94ee25a9de2903c33042cd4c0c3baac80e4
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 f0f9fbd01abb95ebca91d1029cc5fe38f4dde46fc113fd729bc7469bfa4991e7
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                              • SHA256 896b1e66768ed546468df29e473910200cef6acc1af92285651a7ae786e000ac
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 12KB
                                                                                                                                                                                                                                              • SHA256 087ba22295a6a56506bb88c6e636cdcc38a68a8a1239898dc1cf1e0c80e9a783
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 15KB
                                                                                                                                                                                                                                              • SHA256 b681b0ffe4cbb213307b9af373f7f239c2b26a027ec1f52532db1ec25e72921c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 5af90667869144794ce892e128d87a543a764a47ebef5cfa01af46a100170a14
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 3eceb6f9a0e8c05a78c0c9617e5888eb825b2d29a00adb022843dfcb6fbaed1b
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                                              • SHA256 5323c58ae35b796c3f7085297c7b82c05535aa37667b796d45d9099151c00a06
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 717B
                                                                                                                                                                                                                                              • SHA256 93f68c8ee47341816d82be424f1e199b83344a1726a5f18ab76e97d20e538c50
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 1786aa196c35a50e8f5ed45ac598194d1708b68391588b3e458479b0bc566e54
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 7KB
                                                                                                                                                                                                                                              • SHA256 d875e10af548824f69eeb320b7e8b6968bb2fbb1331a6b9660e9b00b394325aa
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                              • SHA256 15e9d7ebbef4791dc7eda2f3e16990892ff1f12327e068c44c15d4f3c4ebbf2e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                              • SHA256 e3897512db3889ad3b31e5b3e16e068acf4f0182ec6e572936727ff796a2c9bb
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 15KB
                                                                                                                                                                                                                                              • SHA256 63897943fae410f20a00c731c1d8d71947813a15058b3fcef925dca2fed1c038
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 12KB
                                                                                                                                                                                                                                              • SHA256 ac30e137d6b806a79d4cd5c73b12287f448c907c575636d724694a8d19945346
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                                              • SHA256 5c5dd9c5a78f8284a31d577033168a0ddcebf8fb236b628ca90a71231f7e5993
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                                              • SHA256 5d24c5f1824cc82a69cafcfc1d436bdba7d3e0be0a119e5b11e3008b230a47ca
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 1d8e4bc7322b60d67bf03ad55114027909e2641369491452360e5c4f3072d795
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 15KB
                                                                                                                                                                                                                                              • SHA256 5369c26c3a89b37a3a9d98c675efd8e5e785622d95f0c8918a5ae8d5b2b6ea92
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 15KB
                                                                                                                                                                                                                                              • SHA256 22ddff710a31b51ccf53ab4ef6936ec3397fe1cba2f1cf7dc50129a4e9c3005c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 15KB
                                                                                                                                                                                                                                              • SHA256 d6b1c292458edf65cd2624e0477fd20391779b2846bda36dba9a71d05a2baf1e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                                              • SHA256 3b4fffcadaf1fce6089653192ef5f1624e5eabc645ae1b3527626e79efa28099
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 12be7ed23c1f427bb6356a8f64121a6335969a79775c940e84894ae5734e016b
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 7KB
                                                                                                                                                                                                                                              • SHA256 5b7558b2291d455e8afc07d23703269132140326c8c82d74624f27b75d74cd6a
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                              • SHA256 073059a56340cc8aef1535865992b538969e73d1ec0e2e446ccb1b570b712084
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                              • SHA256 423a8a1d1cf092f4e5faf2c903676e07bcc7ba44616a4027af3c5a419e50e803
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 d9c0a7202e6e27d48a0df6aa4583b6d2aa70f6c67944cb2b1290e11145af8f5e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 15KB
                                                                                                                                                                                                                                              • SHA256 ec87e9827a3af3e09e4197100ddc8821866bd9a2078591bbc4ee7a96ab5bc017
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 dc1e3a6ecacf1fac13b18259fcd28c2e7108566e9ed794fd29827dcc1d3ce55b
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                                              • SHA256 8800fd7934ba4c80ce993d0ebc1cd94b47b7b600e947e11f677993ab1d0ea240
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                                              • SHA256 033e08b8c2c9aa0fe22fbf5a72f7e53802f4d12ac0df6ae665d432c0dfac5c38
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 9946b06d8434c656b0023d7de4855bdffd450d94eeea947d787cf3534673996d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw16639e9c-48b2-4431-8b3e-c1f8a8425be5.tmp
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0d0d2b7d-bbec-456b-81c4-371132ef712d.raw16639e9c-48b2-4431-8b3e-c1f8a8425be5.tmp
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 06374d88bddb632ba432d7b812d1cd82e8602296fa6f66c9b6487cbe5b89ea44
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              da42144d-04c0-40dc-80ed-10b5bc6e64d9.tmp
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\da42144d-04c0-40dc-80ed-10b5bc6e64d9.tmp
                                                                                                                                                                                                                                              • Size 412B
                                                                                                                                                                                                                                              • SHA256 15f077e7bb8f8a3a936e449020f49efb07480ae93765ff1e95528bcb46ed2d5e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp4940.0.1830423067
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4940.0.1830423067
                                                                                                                                                                                                                                              • Size 265B
                                                                                                                                                                                                                                              • SHA256 86eae9ceec8e47183df8e29bd4d9c1eed2bdb95f86fa8a0aeb975a9f3b8c0c16
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp4940.0.1830423067
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4940.0.1830423067
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 90405e9c94683838a480848d6f0c93b69a9da24df5537bb59fad7a50f3bf19c2
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp4940.0.1830423067
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4940.0.1830423067
                                                                                                                                                                                                                                              • Size 203B
                                                                                                                                                                                                                                              • SHA256 4eba9318252943962a5edc3b61dbb9dd88fef3f22beb8908901ddc1f198c7b4f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp4940.0.1830423067
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4940.0.1830423067
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 f563ca8cd2312fb9a35f3780acd52692478f3267d74a36f11629bc26e8a27ec3
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Size 505B
                                                                                                                                                                                                                                              • SHA256 faca0307ad6240c2e1fb74f49cbc4d32bcb8b4faae20a7d095cdd4c240eb98f4
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Size 693B
                                                                                                                                                                                                                                              • SHA256 49770ee16c11bad0064ccdb15d61ef826cf89b99642cb27c256fbb0e05f8fc5f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Size 783B
                                                                                                                                                                                                                                              • SHA256 608e0b5499d30db764380a0854427dd2488ac6b3c24be40ea56d627e1ea9982c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Size 877B
                                                                                                                                                                                                                                              • SHA256 ee9df91e08618def36956a569a2ae2e825c337b726e5a980998f5b9078b37594
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Size 973B
                                                                                                                                                                                                                                              • SHA256 b70239b8d753f57c48a02cbbd157deaabd84c502e270b09c7e0651b61c8ff5b7
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 90e60397fb848c366d39251b65862fee32ad49363362a3a599494c53f96e4857
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 bdeca737f080ca179c3a5a0f6a1432f4aae331e5bc3fa2be93ba2445c06e76ea
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 4794898a2c406583c2a8b80895b1fc8fbb3c191b0a72653843fe84e541d3089c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 76bfe30c6c1c6ccdedd6c1e0fc62fcececdf0e643b294ef6fe2abafb719aab4e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 5307e9ea0a2e54843e7e9d92f30554f0aed8fe1a19d21c214c33a5a11951ba7e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                              • SHA256 620369e7f682854ba507f5d661c7237310f3d5292bb9bf25aac5f164279404ce
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                              • SHA256 a8b386e274e55dfa303479c6e8fabb2a73fb4b760f8b12b493e5e2a9f7e51bc0
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                              • SHA256 804e9f392033005a15c20673cefc6e7e0eca619951d4a29d41c47c409a89ed5e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                              • SHA256 97ae405c80708fa7dfd40b6ee6648d550b7dd1040df7e9e6d38d73505cd9fae9
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                              • SHA256 2d03653f197de597382e4ac6b234175ff2f13f554de9b47d83f6b6619f3be2fc
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                              • SHA256 cec2423b4cc540b9b1462e338ae055c08641f05d890c3a4c135f77a8b6ce0712
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                              • SHA256 b53a974ab0faf3db0a6a561326a63194ad1c8bd54e25cebc9be805e1f38d8780
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 a2b81f05ea81166468767cb3c505b1d0c219962d366c3cdd9ce3ef0878801e56
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 d80d3443c1fa45f96ee4506d84e536ecc6a6fae3dc4341aa21ac075c51aa44b2
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 6908821ad4ccd98554ad50af51430ed7483410a58da82a2be3ccdcaf2d278a9d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.0.2088627693
                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                              • SHA256 be884103fe3ac98deafeea65a9715907c567e2c9505e9fa8ad50110361ae338e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.0.208862769321edaed4-e1d2-44dd-9479-903df680ef59.tmp
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.0.208862769321edaed4-e1d2-44dd-9479-903df680ef59.tmp
                                                                                                                                                                                                                                              • Size 603B
                                                                                                                                                                                                                                              • SHA256 02852275696d40ec0d86f5537c67fe95b6d4f1ee181fb0a6621a2b066abc412c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 b8e493b978999f8e0a939f7656ae84e964f59c62381742f0fb53a31e54185953
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 e17dd586e2fe805ae0fbc7c3e3b9156ceccbbe1ee4a5f6d8cc5dfcff2c3d1e8a
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 83bb5833cfa03aeb9ed7d42065ed83a3c41b98a8521424f2af799edf23cdac7d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 0cd8b0880464e169ecece37974e814446e80d0fa942cba7da1d7f41569a4cc75
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 1ac5ad08369a489f919b202a7a361b68793be110f3ec8d0e6f126adf97b6a843
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 06742fb0df4b23c729f7b16083702e7e0a1663342a7cea5b023774f920544fa3
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 9a2b006e1cd354e110a5fbb8124dbd71d4d685072d1aba4f91a8b1cb98eed8a8
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 405B
                                                                                                                                                                                                                                              • SHA256 91349c15c174424cd86b2924a2930a813011827367e18a76af0d1fb3ce603dc8
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 596B
                                                                                                                                                                                                                                              • SHA256 2250eeadf896e1e70221558562023bd336266fcfd02c948f0eefeef0ce83ccf2
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 776B
                                                                                                                                                                                                                                              • SHA256 2db2ce6f447d5a5fd0067963551b295f3d0ad07d2f323a92ed720ad5b7ba24eb
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 72374ad3845cab42feec700e6eee0ee8a2383cbf9cd0aa3c4c04cf665c4fc62d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 7554fc781d3db3f1ed8b2a16d54235b0f87dcf146201077b5f57d0d44e743189
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 48a4a4b11c11c9b7d0c423942f955f0ae5abd09655b1c5642f3048f1ac230af2
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 686B
                                                                                                                                                                                                                                              • SHA256 4ee2d036c49aebb3cc7b0c8383269166df452fd76da272a4a9fdf7b0f735f399
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 c8ad295b26c898a1b2a1b8457ec93f4a91963a848999fa21e155715aa39add74
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 f6ad6934e149534524e30dacdd46acf09c2a6cdf3112dc4f7be136e56727d13d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 0223512c71572ad7b94090e9e761dd2325f66d925f03677b3d7777a58b6620e3
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 249B
                                                                                                                                                                                                                                              • SHA256 9bc176c7186654d7c208733eae71106b4d9dcd2d4c2f09daba0653cfa849c967
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 c329333e3edd6f400015ed1619f9a322a653255b48f0f29c6b47b7e2bcdb4ea8
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 498B
                                                                                                                                                                                                                                              • SHA256 9e644ea2f18d5ba1daaf3fd3621824d5835a6fcbde49e9cf8a3970ab92ced1e9
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 870B
                                                                                                                                                                                                                                              • SHA256 77b120f950d2490cd1439f2e61bc27541ee55ce0e53cbb2caaa4a239cf7fbd0f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 af545743b284fda2ac2e8834b0f41518f0283f88df1de59965508fad18131e89
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 0a88e6535299e7ad478f2465b0c2504f9c191b556081a41429331bd72a0c22d3
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 7cc8438b0926e62438e5d27d8c54361df4b7074a82a691ccbacee2cfd044f683
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 200B
                                                                                                                                                                                                                                              • SHA256 a092a0429c4e1c2791b59f26cc347290e7fef15f3b780c5a1a16bf2d46904888
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 966B
                                                                                                                                                                                                                                              • SHA256 26d50ae068fe512c9ba85741edce1259875a98466cb7e2848aa30ee7faf8b8f8
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 a71d4c2c88475b90b7727c8b957ab4059ac133e64fa4f85994924ed2f7de9a3f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 4fd8c04b9f582300b10d5279bfdf91fa3c7c2235d01319bd577abb69a02643d9
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                              • SHA256 32f3335d53f931116f065d855eeb81eeef2e27cdb3b854f91db847e6a74bc8a5
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7284.1.278075160
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 25eac430b36aea532cb16a841db077665414654f4915a56e624abbde637cd2c9
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              suggestions_cache.json
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.json
                                                                                                                                                                                                                                              • Size 660KB
                                                                                                                                                                                                                                              • SHA256 cb5d5f0ed1d38a3a7ed834963adc71fc2ccc5a749b5d93966fd383c267e7d762
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              suggestions_cache.json8d774006-3578-4d6b-92ad-fb8997f7fd5c.tmp
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.json8d774006-3578-4d6b-92ad-fb8997f7fd5c.tmp
                                                                                                                                                                                                                                              • Size 652KB
                                                                                                                                                                                                                                              • SHA256 7731c35e3642fde7f048fc26f7ffef776128ca92375559702fd4eee6d406aef2
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                                                                                              • Size 5KB
                                                                                                                                                                                                                                              • SHA256 741d75d7abc7952013bb30221593eeb961aaa0ddabd4c243ce510759929c0660
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                              • SHA256 2973ef78968c3875a80c67a0aa152086c5d5383fde1b0999cca8a06ea868eff6
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                                                                                              • Size 5KB
                                                                                                                                                                                                                                              • SHA256 48d18c3e1a17f7c5a4140541d65bdbd725ac3f1715f7690dc7f0158d4dfd9e85
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                              • SHA256 460607ee07b7654e134108a8c4dd88284fabd1c3bc24c72ab24803f648ea6d28
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                              • SHA256 1168b8c9f2d83f2518b399fa0a5fac7f047dd3af16ebbdc07931e51d0fceefdb
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                                                                                              • Size 4KB
                                                                                                                                                                                                                                              • SHA256 d04230c0c43d48eb865183a29ca369a37719cba63640090d318adaad792733d8
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                                                                                              • Size 5KB
                                                                                                                                                                                                                                              • SHA256 0bc562fb7b91778ec60ff244ac374690db0a07f1dd0360f372a919ebde1a9304
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                                                                                              • Size 5KB
                                                                                                                                                                                                                                              • SHA256 0a690d6cffccb1202bcc5ab98a6ba7d4c7160c51716b2ed707dcbf3142eb02e1
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Local State
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                                                                                              • Size 5KB
                                                                                                                                                                                                                                              • SHA256 21aa8a28708c13d8303a89dfc9e339b613bda628e74d9491b16896e7034bf2ac
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              VariationsSeedV2
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                                                                                                                                                                                              • Size 19B
                                                                                                                                                                                                                                              • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              VariationsSeedV2
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                                                                                                                                                                                              • Size 11B
                                                                                                                                                                                                                                              • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              assistant_prefs.json
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
                                                                                                                                                                                                                                              • Size 151B
                                                                                                                                                                                                                                              • SHA256 3ae4ae8bfd22d02c9eba1f5317ab2144c518efc9375fb06735819e5313bf6ba7
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              assistant_prefs.jsond1fae2f3-363e-4301-a97e-8b108e01da91.tmp
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.jsond1fae2f3-363e-4301-a97e-8b108e01da91.tmp
                                                                                                                                                                                                                                              • Size 151B
                                                                                                                                                                                                                                              • SHA256 e1cf427edef561347c749c801ac60b3376ac455e3e348a240f4ce7793354999d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              metadata.json
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                                                                                                                                                                                              • Size 572B
                                                                                                                                                                                                                                              • SHA256 1a5de4113b6bfc75255d3dec4f87667285de886631ee78b9fc164c2a4176529c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              metadata.json
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                                                                                                                                                                                              • Size 124B
                                                                                                                                                                                                                                              • SHA256 b7940406aa4e4ef24238ed2a8cfd2576e3e10cdc5716e58f62f3d86546887f2e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              metadata.json
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                                                                                                                                                                                              • Size 236B
                                                                                                                                                                                                                                              • SHA256 bfdfecb4e278bca7a0c06b188089112098a3bb82e2a1ce2c67454605fb359710
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              metadata.json
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                                                                                                                                                                                              • Size 348B
                                                                                                                                                                                                                                              • SHA256 cd9ccd7a961a8afd1c15b5d8266fad5b984520e8d5910c1cc7fa49b97d5dfb8d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              metadata.json
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                                                                                                                                                                                              • Size 796B
                                                                                                                                                                                                                                              • SHA256 1614a34c0d293e834122e438f24bcabe78297f0dcbb18214cfdef8132444b841
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              metadata.json
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                                                                                                                                                                                              • Size 684B
                                                                                                                                                                                                                                              • SHA256 a189c92b35615499890ddffc7b1ae28dac9df1809a29a48b57f2eec79961d3ca
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              metadata.json1e2f780c-003b-4378-8fde-15b1b23d2703.tmp
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json1e2f780c-003b-4378-8fde-15b1b23d2703.tmp
                                                                                                                                                                                                                                              • Size 460B
                                                                                                                                                                                                                                              • SHA256 a4db844ed32f3e561ed7a8231c158393a7981dc34cfa9ce3455e403725d80a42
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              metadata.json01753c36-91f4-4adf-b2a9-d9457042dba5.tmp
                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\extensions_crx_cache\metadata.json01753c36-91f4-4adf-b2a9-d9457042dba5.tmp
                                                                                                                                                                                                                                              • Size 13B
                                                                                                                                                                                                                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              Unconfirmed 196775.crdownload
                                                                                                                                                                                                                                              • Path C:\Users\Admin\Downloads\Unconfirmed 196775.crdownload
                                                                                                                                                                                                                                              • Size 2.8MB
                                                                                                                                                                                                                                              • SHA256 34f5f1d15058af815b8d27c4bec08e2c06257157e3280c04ff38d8f9292bcf68
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              hyph-as.hyb
                                                                                                                                                                                                                                              • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping7284_667244408\hyph-as.hyb
                                                                                                                                                                                                                                              • Size 703B
                                                                                                                                                                                                                                              • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              hyph-mr.hyb
                                                                                                                                                                                                                                              • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping7284_667244408\hyph-mr.hyb
                                                                                                                                                                                                                                              • Size 687B
                                                                                                                                                                                                                                              • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              hyph-nn.hyb
                                                                                                                                                                                                                                              • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping7284_667244408\hyph-nn.hyb
                                                                                                                                                                                                                                              • Size 141KB
                                                                                                                                                                                                                                              • SHA256 5bcbb58eaf65f13f6d039244d942f37c127344e3a0a2e6c32d08236945132809
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                              Submit Download

                                                                                                                                                                                                                                              memory/2200-1215-0x00007FF89DEA0000-0x00007FF89DEA1000-memory.dmp
                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                              memory/2200-1216-0x00007FF89E410000-0x00007FF89E411000-memory.dmp
                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                              memory/9992-6134-0x0000015699090000-0x0000015699091000-memory.dmp
                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                              memory/9992-6141-0x0000015699090000-0x0000015699091000-memory.dmp
                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                              memory/9992-6143-0x0000015699090000-0x0000015699091000-memory.dmp
                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                              memory/9992-6142-0x0000015699090000-0x0000015699091000-memory.dmp
                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                              memory/9992-6132-0x0000015699090000-0x0000015699091000-memory.dmp
                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                              memory/9992-6138-0x0000015699090000-0x0000015699091000-memory.dmp
                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                              memory/9992-6139-0x0000015699090000-0x0000015699091000-memory.dmp
                                                                                                                                                                                                                                              Download

                                                                                                                                                                                                                                              memory/9992-6140-0x0000015699090000-0x0000015699091000-memory.dmp
                                                                                                                                                                                                                                              Download