Overview

overview

8

Static

static

3

2026-09-24...at.exe

windows10-2004-x64

8

2026-09-24...at.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    89s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    24/09/2026, 03:09

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-09-24_b1407aa6ec29650e434fd3c9983432d5_amadey_elex_hellokitty_luca-stealer_njrat.exe
  • Size 1.5MB
  • Sample260924-dnghascf69
  • SHA256 9d27846404ab86666515e0f385c0c61c6a70bbbf2b73cc50a80cfffccdf9cb67
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationransomwarespywarestealertrojan

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Checks computer location settings 2 TTPs 18 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 3 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 31 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 3 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 14 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 6 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 44 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 37 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 5 IoCs
  • Suspicious use of SendNotifyMessage 14 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-09-24_b1407aa6ec29650e434fd3c9983432d5_amadey_elex_hellokitty_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-09-24_b1407aa6ec29650e434fd3c9983432d5_amadey_elex_hellokitty_luca-stealer_njrat.exe"
    1⤵
    • Downloads MZ/PE file
    • Checks computer location settings
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1692
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" /allusers=0 /silent
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:1664
      • C:\Users\Admin\AppData\Local\Temp\7zS086A2729\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS086A2729\installer.exe /allusers=0 /silent --server-tracking-blob=NDlmNzc1OGVkMTBkMTU1YmE4ZDdmMGQxN2ViN2RhZmNiZGI4NzExYzczYzgxYjBmM2VhNTc4MjlmMzQ4OTZkMTp7ImNvdW50cnkiOiJHQiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijoib3BlcmEiLCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fc291cmNlPXdyayZ1dG1fbWVkaXVtPXBiJnV0bV9jYW1wYWlnbj1zcG90aWZ5X29wZXJhIiwidGltZXN0YW1wIjoiMTc5MDIxOTM3OC4zOTM3IiwidXNlcmFnZW50IjoiT3BlcmEgSW5zdGFsbGVyLzEuMCIsInV0bSI6eyJjYW1wYWlnbiI6InNwb3RpZnlfb3BlcmEiLCJtZWRpdW0iOiJwYiIsInNvdXJjZSI6IndyayJ9LCJ1dWlkIjoiODY5ODMwMjItOWY4ZS00OTExLTk5OGEtYjc1ZmEwYzhjYjAxIn0=
        3⤵
        • Downloads MZ/PE file
        • Executes dropped EXE
        • Enumerates connected drives
        • Enumerates system info in registry
        • Modifies system certificate store
        • Suspicious use of WriteProcessMemory
        PID:888
        • C:\Users\Admin\AppData\Local\Temp\7zS086A2729\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS086A2729\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x28c,0x290,0x294,0x268,0x298,0x7ff7332b69d8,0x7ff7332b69e8,0x7ff7332b69f8
          4⤵
          • Executes dropped EXE
          PID:4880
        • C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:3144
        • C:\Users\Admin\AppData\Local\Temp\7zS086A2729\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zS086A2729\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=888 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\opera_package_20260924040945" --session-guid=fa875568-f60d-4084-9cda-ba2ac2ddd678 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=8808000000000000
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Suspicious use of WriteProcessMemory
          PID:1200
          • C:\Users\Admin\AppData\Local\Temp\7zS086A2729\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zS086A2729\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x288,0x298,0x29c,0x264,0x2a0,0x7ff7332b69d8,0x7ff7332b69e8,0x7ff7332b69f8
            5⤵
            • Executes dropped EXE
            PID:3808
          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe" --backend --initial-pid=888 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\opera_package_202609240409451" --session-guid=fa875568-f60d-4084-9cda-ba2ac2ddd678 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=136.0.6008.22
            5⤵
            • Executes dropped EXE
            • Enumerates connected drives
            • Modifies registry class
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:3100
            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x298,0x29c,0x2a0,0x270,0x2a4,0x7ff76d2069d8,0x7ff76d2069e8,0x7ff76d2069f8
              6⤵
              • Executes dropped EXE
              PID:4796
            • C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\opera_package_202609240409451\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\opera_package_202609240409451\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • System Location Discovery: System Language Discovery
              • Modifies Internet Explorer settings
              PID:1676
              • C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\opera_package_202609240409451\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\opera_package_202609240409451\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x87c9cc,0x87c9d8,0x87c9e4
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:3692
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • System Location Discovery: System Language Discovery
                • Enumerates system info in registry
                • Suspicious use of WriteProcessMemory
                PID:5432
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x28c9cc,0x28c9d8,0x28c9e4
                  8⤵
                  • System Location Discovery: System Language Discovery
                  PID:3800
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • System Location Discovery: System Language Discovery
                  • Enumerates system info in registry
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:2052
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:3148
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x240,0x244,0x248,0x23c,0x24c,0x23bef25ed30,0x23bef25ed40,0x23bef25ed50
                      10⤵
                      • Executes dropped EXE
                      PID:1396
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:5304
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x1846edeed30,0x1846edeed40,0x1846edeed50
                      10⤵
                      • Executes dropped EXE
                      PID:840
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x294,0x298,0x29c,0x26c,0x2a0,0x1497324,0x1497330,0x149733c
                    9⤵
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:6196
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:6232
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x23c,0x240,0x244,0x238,0x248,0x1a56329ed30,0x1a56329ed40,0x1a56329ed50
                        11⤵
                        • Executes dropped EXE
                        PID:6296
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:6452
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x23c,0x240,0x244,0x238,0x248,0x1cfa724ed30,0x1cfa724ed40,0x1cfa724ed50
                        11⤵
                        • Executes dropped EXE
                        PID:6540
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:7016
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x23c,0x240,0x244,0x238,0x248,0x246a345ed30,0x246a345ed40,0x246a345ed50
                        11⤵
                        • Executes dropped EXE
                        PID:7112
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\opera_package_202609240409451\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:5752
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x148faf0ed30,0x148faf0ed40,0x148faf0ed50
                7⤵
                • Executes dropped EXE
                PID:4156
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1800,i,12807549123050336040,13177526662718801692,262144 --field-trial-handle=1996,i,9597595841823477574,16008094426178607461,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2000,i,10051403786768973709,6779646479455077160,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1988 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6548
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2224,i,2549262432803017534,14401100564085667638,524288 --field-trial-handle=1996,i,9597595841823477574,16008094426178607461,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2000,i,10051403786768973709,6779646479455077160,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2228 /prefetch:3
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Time Discovery
                • Enumerates system info in registry
                PID:6588
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2536,i,3827094681918374260,10813185236945886841,524288 --field-trial-handle=1996,i,9597595841823477574,16008094426178607461,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2000,i,10051403786768973709,6779646479455077160,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2544 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6824
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3536,i,10970671118389429222,5641206289755602325,2097152 --field-trial-handle=1996,i,9597595841823477574,16008094426178607461,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2000,i,10051403786768973709,6779646479455077160,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3660 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                PID:7032
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4156,i,4465069958663916143,4631583968312654039,524288 --field-trial-handle=1996,i,9597595841823477574,16008094426178607461,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2000,i,10051403786768973709,6779646479455077160,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4164 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6568
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4432,i,12362679371311415207,15348717473967079990,2097152 --field-trial-handle=1996,i,9597595841823477574,16008094426178607461,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2000,i,10051403786768973709,6779646479455077160,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4476 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:7092
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4772,i,12703561767655968617,5758862175418734646,524288 --field-trial-handle=1996,i,9597595841823477574,16008094426178607461,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2000,i,10051403786768973709,6779646479455077160,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4788 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:7608
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4924,i,12107636869064845247,6202928357003933040,524288 --field-trial-handle=1996,i,9597595841823477574,16008094426178607461,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2000,i,10051403786768973709,6779646479455077160,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4936 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:7668
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4912,i,5798474188270776873,9034694316293508442,524288 --field-trial-handle=1996,i,9597595841823477574,16008094426178607461,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2000,i,10051403786768973709,6779646479455077160,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5108 /prefetch:8
                7⤵
                • Loads dropped DLL
                PID:7104
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5064,i,9910715734608939113,12049639897485891339,2097152 --field-trial-handle=1996,i,9597595841823477574,16008094426178607461,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2000,i,10051403786768973709,6779646479455077160,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4408 /prefetch:1
                7⤵
                • Checks computer location settings
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6916
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\opera_package_202609240409451\additional_file2.tmp"
              6⤵
              • Suspicious use of WriteProcessMemory
              PID:7296
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x1845305ed30,0x1845305ed40,0x1845305ed50
                7⤵
                  PID:6592
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
                6⤵
                • Enumerates system info in registry
                PID:6948
                • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x1e27ef7ed30,0x1e27ef7ed40,0x1e27ef7ed50
                  7⤵
                    PID:7576
            • C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\opera_package_202609240409451\assistant\Assistant_136.0.6008.22_Setup.exe_sfx.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\opera_package_202609240409451\assistant\Assistant_136.0.6008.22_Setup.exe_sfx.exe"
              4⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:1304
            • C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\opera_package_202609240409451\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\opera_package_202609240409451\assistant\assistant_installer.exe" --version
              4⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:5688
              • C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\opera_package_202609240409451\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\opera_package_202609240409451\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x240,0x244,0x248,0x23c,0x24c,0x87c9cc,0x87c9d8,0x87c9e4
                5⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:4328
      • C:\Windows\System32\alg.exe
        C:\Windows\System32\alg.exe
        1⤵
        • Executes dropped EXE
        • Drops file in System32 directory
        • Drops file in Program Files directory
        • Drops file in Windows directory
        PID:4716
      • C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
        C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
        1⤵
        • Executes dropped EXE
        PID:4080
      • C:\Windows\System32\svchost.exe
        C:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv
        1⤵
          PID:5880
        • C:\Windows\system32\fxssvc.exe
          C:\Windows\system32\fxssvc.exe
          1⤵
          • Executes dropped EXE
          • Modifies data under HKEY_USERS
          • Suspicious use of AdjustPrivilegeToken
          PID:4420
        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
          1⤵
          • Executes dropped EXE
          PID:5256
        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
          1⤵
          • Executes dropped EXE
          PID:3768
        • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
          "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
          1⤵
          • Executes dropped EXE
          PID:556
        • C:\Windows\System32\msdtc.exe
          C:\Windows\System32\msdtc.exe
          1⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          • Drops file in Windows directory
          PID:2840
        • \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
          "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
          1⤵
          • Executes dropped EXE
          PID:440
        • C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe
          C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe
          1⤵
          • Executes dropped EXE
          PID:404
        • C:\Windows\SysWow64\perfhost.exe
          C:\Windows\SysWow64\perfhost.exe
          1⤵
          • Executes dropped EXE
          PID:1700
        • C:\Windows\system32\locator.exe
          C:\Windows\system32\locator.exe
          1⤵
          • Executes dropped EXE
          PID:6040
        • C:\Windows\System32\SensorDataService.exe
          C:\Windows\System32\SensorDataService.exe
          1⤵
          • Executes dropped EXE
          • Checks SCSI registry key(s)
          PID:3912
        • C:\Windows\System32\snmptrap.exe
          C:\Windows\System32\snmptrap.exe
          1⤵
          • Executes dropped EXE
          PID:2356
        • C:\Windows\system32\spectrum.exe
          C:\Windows\system32\spectrum.exe
          1⤵
          • Executes dropped EXE
          • Checks SCSI registry key(s)
          PID:5900
        • C:\Windows\System32\OpenSSH\ssh-agent.exe
          C:\Windows\System32\OpenSSH\ssh-agent.exe
          1⤵
          • Executes dropped EXE
          PID:2744
        • C:\Windows\system32\svchost.exe
          C:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc
          1⤵
            PID:2296
          • C:\Windows\system32\TieringEngineService.exe
            C:\Windows\system32\TieringEngineService.exe
            1⤵
            • Executes dropped EXE
            • Checks processor information in registry
            • Suspicious use of AdjustPrivilegeToken
            PID:5464
          • C:\Windows\system32\AgentService.exe
            C:\Windows\system32\AgentService.exe
            1⤵
            • Executes dropped EXE
            • Suspicious use of AdjustPrivilegeToken
            PID:3676
          • C:\Windows\System32\vds.exe
            C:\Windows\System32\vds.exe
            1⤵
            • Executes dropped EXE
            PID:2308
          • C:\Windows\system32\vssvc.exe
            C:\Windows\system32\vssvc.exe
            1⤵
            • Executes dropped EXE
            • Suspicious use of AdjustPrivilegeToken
            PID:5840
          • C:\Windows\system32\wbengine.exe
            "C:\Windows\system32\wbengine.exe"
            1⤵
            • Executes dropped EXE
            • Suspicious use of AdjustPrivilegeToken
            PID:4000
          • C:\Windows\system32\wbem\WmiApSrv.exe
            C:\Windows\system32\wbem\WmiApSrv.exe
            1⤵
            • Executes dropped EXE
            PID:5332
          • C:\Windows\system32\SearchIndexer.exe
            C:\Windows\system32\SearchIndexer.exe /Embedding
            1⤵
            • Executes dropped EXE
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of WriteProcessMemory
            PID:1888
            • C:\Windows\system32\SearchProtocolHost.exe
              "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
              2⤵
              • Modifies data under HKEY_USERS
              PID:1056
            • C:\Windows\system32\SearchFilterHost.exe
              "C:\Windows\system32\SearchFilterHost.exe" 0 912 916 924 8192 920 896
              2⤵
              • Modifies data under HKEY_USERS
              PID:1188
          • C:\Windows\SysWOW64\DllHost.exe
            C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
            1⤵
            • System Location Discovery: System Language Discovery
            • Suspicious use of SetWindowsHookEx
            PID:4520
          • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
            C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
            1⤵
            • System Location Discovery: System Language Discovery
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of WriteProcessMemory
            PID:1620
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
              2⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              • Suspicious use of WriteProcessMemory
              PID:2032
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x23c5e27ed30,0x23c5e27ed40,0x23c5e27ed50
                3⤵
                • Executes dropped EXE
                PID:1180
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
              2⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              • Suspicious use of WriteProcessMemory
              PID:6188
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x234,0x238,0x23c,0x230,0x240,0x26f19d9ed30,0x26f19d9ed40,0x26f19d9ed50
                3⤵
                • Executes dropped EXE
                PID:6212
            • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x284,0x288,0x28c,0x25c,0x290,0x1497324,0x1497330,0x149733c
              2⤵
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:6420
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                3⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Suspicious use of WriteProcessMemory
                PID:6440
                • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x1ed95a6ed30,0x1ed95a6ed40,0x1ed95a6ed50
                  4⤵
                  • Executes dropped EXE
                  PID:6508
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                3⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                • Suspicious use of WriteProcessMemory
                PID:7008
                • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x1d5d704ed30,0x1d5d704ed40,0x1d5d704ed50
                  4⤵
                  • Executes dropped EXE
                  PID:7096
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                3⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Suspicious use of WriteProcessMemory
                PID:7736
                • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x2569506ed30,0x2569506ed40,0x2569506ed50
                  4⤵
                    PID:7884
            • C:\Windows\system32\wbem\unsecapp.exe
              C:\Windows\system32\wbem\unsecapp.exe -Embedding
              1⤵
                PID:5876
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                1⤵
                • Checks computer location settings
                • Adds Run key to start application
                • Drops file in Program Files directory
                • Checks processor information in registry
                • Enumerates system info in registry
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                • Suspicious use of AdjustPrivilegeToken
                • Suspicious use of WriteProcessMemory
                PID:7668
                • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x234,0x238,0x23c,0x230,0x240,0x222e240ed30,0x222e240ed40,0x222e240ed50
                  2⤵
                    PID:7488
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1856,i,12462769303607644636,1883006804220388707,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2316 /prefetch:3
                    2⤵
                    • System Time Discovery
                    PID:6864
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1720,i,12750151349240379033,13263232805948926421,262144 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2276 /prefetch:2
                    2⤵
                      PID:7508
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2648,i,3805393187189047374,7929916763306294098,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2552 /prefetch:8
                      2⤵
                      • Enumerates system info in registry
                      PID:7480
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2196,i,14623131539996268978,6529127456081471070,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3552 /prefetch:8
                      2⤵
                      • Enumerates system info in registry
                      PID:6156
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3476,i,12491179458204631176,3817023157968989925,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3584 /prefetch:8
                      2⤵
                      • Enumerates system info in registry
                      PID:2016
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3488,i,3403861626396912548,6576028248630368318,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3604 /prefetch:8
                      2⤵
                      • Enumerates system info in registry
                      PID:3004
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3524,i,16451266001044146845,1027358070332032686,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3664 /prefetch:8
                      2⤵
                      • Enumerates system info in registry
                      PID:6284
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3500,i,15978745737320977202,6222058776464878448,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3624 /prefetch:8
                      2⤵
                      • Enumerates system info in registry
                      PID:7000
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3512,i,4646195379254603839,10721058708648122004,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3644 /prefetch:8
                      2⤵
                      • Enumerates system info in registry
                      PID:7348
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3536,i,16563531641856894428,15500220107897703736,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3684 /prefetch:8
                      2⤵
                        PID:6992
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3760,i,17092023787059991764,11625441520879403033,2097152 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4308 /prefetch:1
                        2⤵
                        • Checks computer location settings
                        • Enumerates system info in registry
                        PID:6496
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_gx_splash.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                        2⤵
                        • Modifies registry class
                        • Suspicious use of AdjustPrivilegeToken
                        PID:5692
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4876,i,13135231892462614405,16495694837761305802,2097152 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4888 /prefetch:1
                        2⤵
                        • Checks computer location settings
                        • Enumerates system info in registry
                        PID:4456
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5164,i,15524943028080336992,9937678109840770464,2097152 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5160 /prefetch:2
                        2⤵
                        • Checks computer location settings
                        PID:3496
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5344,i,4971644531439051131,8536313362951340663,2097152 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5352 /prefetch:1
                        2⤵
                        • Checks computer location settings
                        PID:6484
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5472,i,9342552607296981314,8272119094674618744,2097152 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5480 /prefetch:1
                        2⤵
                        • Checks computer location settings
                        PID:6824
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6040,i,12702696095822596417,14838631660138698652,2097152 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6052 /prefetch:1
                        2⤵
                        • Checks computer location settings
                        • Enumerates system info in registry
                        PID:6844
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6264,i,7548057974283553362,7805097909357969789,2097152 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6272 /prefetch:1
                        2⤵
                        • Checks computer location settings
                        • Enumerates system info in registry
                        PID:4776
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6952,i,13623828294115865932,7618571800222320715,2097152 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6896 /prefetch:2
                        2⤵
                        • Checks computer location settings
                        • Enumerates system info in registry
                        PID:712
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=5908,i,14182686411756395069,11219317304791110831,2097152 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7328 /prefetch:2
                        2⤵
                        • Checks computer location settings
                        • Enumerates system info in registry
                        PID:1004
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6256,i,7510713297267339484,290916994692294334,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=6028 /prefetch:8
                        2⤵
                        • Enumerates system info in registry
                        PID:7056
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=7492,i,9264457197804589023,1577347752691820914,2097152 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7520 /prefetch:1
                        2⤵
                        • Checks computer location settings
                        • Enumerates system info in registry
                        PID:7896
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7700,i,10470893500450264387,7557381227078557326,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7720 /prefetch:8
                        2⤵
                        • Enumerates system info in registry
                        PID:4724
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7572,i,17959986925493650152,2093364067545271386,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7736 /prefetch:8
                        2⤵
                        • Enumerates system info in registry
                        PID:7960
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7864,i,11393545383761212376,1097232181065687980,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7888 /prefetch:8
                        2⤵
                          PID:5216
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7876,i,11894691236718901193,10857581126761750450,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=7924 /prefetch:8
                          2⤵
                          • Enumerates system info in registry
                          PID:6152
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8256,i,1836194910172786510,1489626621240473211,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8264 /prefetch:8
                          2⤵
                          • Enumerates system info in registry
                          PID:2624
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8272,i,17079563662113015175,50703440069148550,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8292 /prefetch:8
                          2⤵
                          • Enumerates system info in registry
                          PID:7064
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8548,i,9933283993161180307,11035987364205713416,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8556 /prefetch:8
                          2⤵
                          • Enumerates system info in registry
                          PID:6792
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8560,i,14623353295032598665,4812126961047412548,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8688 /prefetch:8
                          2⤵
                          • Enumerates system info in registry
                          PID:7260
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8700,i,4108699239976572368,9693836668476364728,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8720 /prefetch:8
                          2⤵
                            PID:1880
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8944,i,2237731471297108217,15742240385251574219,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8940 /prefetch:8
                            2⤵
                            • Enumerates system info in registry
                            PID:1092
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8972,i,16071378319281464857,5620067365831634398,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=8992 /prefetch:8
                            2⤵
                            • Enumerates system info in registry
                            PID:4280
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9124,i,6847707061834869550,10837260525061841278,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9244 /prefetch:8
                            2⤵
                              PID:1116
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9372,i,6769486776742558649,17410278850307070752,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9380 /prefetch:8
                              2⤵
                                PID:5008
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9540,i,874002039435457878,13159482926524927372,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9516 /prefetch:8
                                2⤵
                                • Enumerates system info in registry
                                PID:3392
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=6216,i,3312984643656451068,18114384964232321720,2097152 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=7556 /prefetch:2
                                2⤵
                                • Checks computer location settings
                                PID:10032
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9836,i,9764819754956450092,12316057507516052155,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=9872 /prefetch:8
                                2⤵
                                • Enumerates system info in registry
                                PID:10096
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9824,i,3451750950077685618,2686550942630956660,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=9852 /prefetch:8
                                2⤵
                                • Enumerates system info in registry
                                PID:10104
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10516,i,12032422394322768144,4473575925656222472,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=10536 /prefetch:8
                                2⤵
                                  PID:10148
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10512,i,8268264705493278020,15545302217440920788,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=10688 /prefetch:8
                                  2⤵
                                  • Enumerates system info in registry
                                  PID:10288
                                • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                  2⤵
                                  • Enumerates system info in registry
                                  PID:10352
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                    C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x308,0x30c,0x310,0x304,0x314,0x140735598,0x1407355a8,0x1407355b8
                                    3⤵
                                      PID:8216
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe" --fix-taskbar-pins
                                    2⤵
                                      PID:6164
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
                                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x26c,0x270,0x274,0x248,0x278,0x7ff76d2069d8,0x7ff76d2069e8,0x7ff76d2069f8
                                        3⤵
                                          PID:9100
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=10928,i,17873937468635387069,12704601763896738369,2097152 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=4440 /prefetch:1
                                        2⤵
                                        • Checks computer location settings
                                        PID:5160
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5872,i,15257509549453463340,12170502233926915446,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=4300 /prefetch:8
                                        2⤵
                                          PID:8244
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11164,i,4596585910427523152,9623208386168469829,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=11172 /prefetch:8
                                          2⤵
                                            PID:8284
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10540,i,17030786286791949569,18133200201348964452,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=1704 /prefetch:8
                                            2⤵
                                            • Enumerates system info in registry
                                            PID:9804
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10932,i,17333830291304270350,9285980125875608140,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=10748 /prefetch:8
                                            2⤵
                                              PID:11152
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4252,i,16906058457142144014,3036373233244678056,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=11120 /prefetch:8
                                              2⤵
                                                PID:10164
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11128,i,15484181734503925932,18274456450282158504,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=3660 /prefetch:8
                                                2⤵
                                                  PID:10172
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11176,i,4203694358140623387,3085595838655323178,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=11164 /prefetch:8
                                                  2⤵
                                                    PID:8436
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8020,i,15490183802128981470,12744341031268235512,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=8008 /prefetch:8
                                                    2⤵
                                                      PID:8580
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7716,i,9861318545384956808,17008621747017761066,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=8224 /prefetch:8
                                                      2⤵
                                                        PID:11184
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=10124,i,3067350357060066395,2612950978167262268,2097152 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=7544 /prefetch:2
                                                        2⤵
                                                          PID:10996
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=10508,i,13238085704944476622,13987865341043377207,2097152 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=10524 /prefetch:2
                                                          2⤵
                                                            PID:10716
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7944,i,15875484371676320907,12131952293967723733,524288 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=4252 /prefetch:8
                                                            2⤵
                                                              PID:8064
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=8052,i,1835684206787796294,2433034001581756438,2097152 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=9848 /prefetch:2
                                                              2⤵
                                                                PID:9540
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=10872,i,3464146946045028725,15790691521797113674,2097152 --field-trial-handle=2284,i,17890336741953609144,13856863006251301475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2288,i,3830989345640694738,3731028645945888909,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=7968 /prefetch:2
                                                                2⤵
                                                                  PID:9504
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                                1⤵
                                                                • Enumerates system info in registry
                                                                PID:9440
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                  C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x2b4,0x2b8,0x2bc,0x26c,0x2c0,0x140735598,0x1407355a8,0x1407355b8
                                                                  2⤵
                                                                    PID:10040
                                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                                    2⤵
                                                                      PID:9432
                                                                  • C:\Windows\system32\BackgroundTransferHost.exe
                                                                    "BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.1
                                                                    1⤵
                                                                      PID:3392
                                                                    • C:\Windows\system32\BackgroundTransferHost.exe
                                                                      "BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.1
                                                                      1⤵
                                                                        PID:4724

                                                                      Network

                                                                            MITRE ATT&CK Enterprise v16

                                                                            Reconnaissance

                                                                            Resource Development

                                                                            Initial Access

                                                                            Execution

                                                                            Persistence

                                                                            Boot or Logon Autostart Execution

                                                                            1
                                                                            T1547

                                                                            Registry Run Keys / Startup Folder

                                                                            1
                                                                            T1547.001

                                                                            Event Triggered Execution

                                                                            1
                                                                            T1546

                                                                            Component Object Model Hijacking

                                                                            1
                                                                            T1546.015

                                                                            Privilege Escalation

                                                                            Boot or Logon Autostart Execution

                                                                            1
                                                                            T1547

                                                                            Registry Run Keys / Startup Folder

                                                                            1
                                                                            T1547.001

                                                                            Event Triggered Execution

                                                                            1
                                                                            T1546

                                                                            Component Object Model Hijacking

                                                                            1
                                                                            T1546.015

                                                                            Defense Evasion

                                                                            Modify Registry

                                                                            3
                                                                            T1112

                                                                            Subvert Trust Controls

                                                                            1
                                                                            T1553

                                                                            Install Root Certificate

                                                                            1
                                                                            T1553.004

                                                                            Credential Access

                                                                            Credentials from Password Stores

                                                                            1
                                                                            T1555

                                                                            Credentials from Web Browsers

                                                                            1
                                                                            T1555.003

                                                                            Unsecured Credentials

                                                                            1
                                                                            T1552

                                                                            Credentials In Files

                                                                            1
                                                                            T1552.001

                                                                            Discovery

                                                                            Peripheral Device Discovery

                                                                            2
                                                                            T1120

                                                                            Query Registry

                                                                            7
                                                                            T1012

                                                                            System Information Discovery

                                                                            6
                                                                            T1082

                                                                            System Location Discovery

                                                                            1
                                                                            T1614

                                                                            System Language Discovery

                                                                            1
                                                                            T1614.001

                                                                            System Time Discovery

                                                                            1
                                                                            T1124

                                                                            Lateral Movement

                                                                            Collection

                                                                            Data from Local System

                                                                            1
                                                                            T1005

                                                                            Command and Control

                                                                            Exfiltration

                                                                            Impact

                                                                            Replay Monitor

                                                                            Loading Replay Monitor...

                                                                            Downloads

                                                                            elevation_service.exe
                                                                            • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                            • Size 2.7MB
                                                                            • SHA256 bd99bc64c31f9963b5bb8a2591f4bd3234a8de105c6c960fb08cb3c8c5b184b6
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            maintenanceservice.exe
                                                                            • Path C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
                                                                            • Size 1.6MB
                                                                            • SHA256 c6d2a15f2ffa9bba7af8d07458c3a8670b27794a3aeba0a536600afae6d8e8d1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            OSE.EXE
                                                                            • Path C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE
                                                                            • Size 1.6MB
                                                                            • SHA256 6c7d4b7d6006b0d31ff427b303544b9138ab9ac5eabf7a9f8e583d42b7308b11
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            elevation_service.exe
                                                                            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                            • Size 2.8MB
                                                                            • SHA256 978b00951df403c2fbcfce79c0bc759d33f8c694ed2cd79bbcce2507e400dd20
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                            • Size 471B
                                                                            • SHA256 21a6ca94fdcb33120149ce89d82825249ebfa5e0c4312703086412b1d9b8ad92
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                            • Size 416B
                                                                            • SHA256 93aec694621010887731114450d930b89ec42870c3f6595b25245e36fd307cdf
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            136.0.6008.22.manifest
                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\136.0.6008.22.manifest
                                                                            • Size 225B
                                                                            • SHA256 f7cf7f8bc1e2a84858fc169d027458c9fa565afdc94ac9f58891f39667e05960
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            150x150Logo.scale-100.png
                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-100.png
                                                                            • Size 1KB
                                                                            • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            150x150Logo.scale-100_contrast-white.png
                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-100_contrast-white.png
                                                                            • Size 1KB
                                                                            • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            150x150Logo.scale-140.png
                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-140.png
                                                                            • Size 1KB
                                                                            • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            150x150Logo.scale-140_contrast-white.png
                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-140_contrast-white.png
                                                                            • Size 1KB
                                                                            • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            150x150Logo.scale-180.png
                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-180.png
                                                                            • Size 1KB
                                                                            • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            150x150Logo.scale-180_contrast-white.png
                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-180_contrast-white.png
                                                                            • Size 1KB
                                                                            • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            150x150Logo.scale-80.png
                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-80.png
                                                                            • Size 827B
                                                                            • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            150x150Logo.scale-80_contrast-white.png
                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-80_contrast-white.png
                                                                            • Size 799B
                                                                            • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            70x70Logo.scale-100.png
                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-100.png
                                                                            • Size 781B
                                                                            • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            70x70Logo.scale-100_contrast-white.png
                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-100_contrast-white.png
                                                                            • Size 752B
                                                                            • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            70x70Logo.scale-140.png
                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-140.png
                                                                            • Size 991B
                                                                            • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            installer.exe
                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
                                                                            • Size 8.0MB
                                                                            • SHA256 3a7cd7023d780aee3c44e7502e0446807abf3f3558e1074f001e7dada324ec7a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            installer_prefs.json
                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                                                            • Size 1KB
                                                                            • SHA256 e80a7ba0acecd35d34f7c9eac7e523fe21602e172cec014d01c768fbfcd75389
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            opera.exe
                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            • Size 3.4MB
                                                                            • SHA256 1287544e37d6364852070e0481ba9f207926e3a08a152ce9140d52954b919c8f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            Opera Browser.lnk
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\opera_package_202609240409451\Opera Browser.lnk
                                                                            • Size 1KB
                                                                            • SHA256 60c4e4762297ce3d15dedf68db187ba7333ae3950b6667b6e872d6838d303c3f
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            additional_file0.tmp
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\opera_package_202609240409451\additional_file0.tmp
                                                                            • Size 2.9MB
                                                                            • SHA256 3f73fcad3e4341457014e2d3b6f2d8897626292ab63bcfbed20cc9156bc5059f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            assistant_installer.exe
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\opera_package_202609240409451\assistant\assistant_installer.exe
                                                                            • Size 2.4MB
                                                                            • SHA256 7759a3f4d694115a391420ae1ca24edeafe6f02ee4fc2dee9937d8a4b804a608
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            dbgcore.DLL
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\opera_package_202609240409451\assistant\dbgcore.DLL
                                                                            • Size 196KB
                                                                            • SHA256 e7e395f28ceb05ed3519970190ec4f72a7489609acd1401fb6b41582cc1dcc3e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            dbghelp.dll
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\opera_package_202609240409451\assistant\dbghelp.dll
                                                                            • Size 1.8MB
                                                                            • SHA256 27dde9b1136e5c13cc16b7cfa8945a9a9f7508ad91f124961eabed06b2886c4b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            installer_prefs_include.json
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\opera_package_202609240409451\installer_prefs_include.json
                                                                            • Size 239B
                                                                            • SHA256 ad0a70852936dbf15eeb5accadd7acc1554959df5b85898911e4281e402e287a
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            installer_prefs_include.json
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\opera_package_202609240409451\installer_prefs_include.json
                                                                            • Size 1KB
                                                                            • SHA256 02eb340db3e151967a76dc82d3d60fddaa57b9e46c48e183408390e1da2f351d
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            installer_prefs_include.json.backup
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\cadc602c-10fd-4ace-b700-b1c26815bbe9 Opera Installer Temp\opera_package_202609240409451\installer_prefs_include.json.backup
                                                                            • Size 224B
                                                                            • SHA256 f799101396e58ec98238b81669c288b0649788476fdc997cd029cfd5239c8aad
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            installer.exe
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\7zS086A2729\installer.exe
                                                                            • Size 8.0MB
                                                                            • SHA256 7c9c1c49c414174606f75b1a24d4c5b0b1db84fa522d06e827d9d32e3d2e0e93
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            OpInst.exe
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                                                            • Size 2.8MB
                                                                            • SHA256 53edb6759e796fcf70a9a1f8929abf6472f57a11874d54c57555501772b16f7d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            bg.png
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                                                            • Size 224KB
                                                                            • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            favicon_opera_one.png
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5752_1089631125\CRX_INSTALL\favicon_opera_one.png
                                                                            • Size 2KB
                                                                            • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5752_1089631125\de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                                            • Size 4.6MB
                                                                            • SHA256 e81986014a4fb55c0aa220745d2433c51ad29166b32693de8911784dd3920584
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            0398a1bb-e81b-4beb-a34d-2f0ac40bb864.tmp
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7668_1117517034\0398a1bb-e81b-4beb-a34d-2f0ac40bb864.tmp
                                                                            • Size 13KB
                                                                            • SHA256 ce8adf970c3290b7ea94c85727c5abe7eb232e16026a1f8f876ad7f3ec03573d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            957a31a0-cf3a-4a07-b7b0-9ca83530ead0.tmp
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7668_1444194493\957a31a0-cf3a-4a07-b7b0-9ca83530ead0.tmp
                                                                            • Size 46KB
                                                                            • SHA256 0443bab24dce89bd68e06dba7f4335db89e70cf99ac92a0919d5df35a2c3cf93
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            9353ebc0-9fdb-4789-aed0-6b72ac9189ea.tmp
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7668_619813867\9353ebc0-9fdb-4789-aed0-6b72ac9189ea.tmp
                                                                            • Size 2.6MB
                                                                            • SHA256 19bc35ca347a6560c0183e56da6bee3353737e78aa9eff9111c5ebd897b0cfd5
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            Icon_Light_Neutral.png
                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7668_619813867\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                            • Size 2KB
                                                                            • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            settings.dat
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                            • Size 40B
                                                                            • SHA256 52904b2384853dc9447795105a1ceb37a12b519ad5bb37adc094ba17b48ac829
                                                                            • MD5 SHA1 SHA512
                                                                            Submit Download

                                                                            04405d78-505d-4e3c-91a9-b6ce3fa98f30.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\04405d78-505d-4e3c-91a9-b6ce3fa98f30.tmp
                                                                            • Size 171B
                                                                            • SHA256 a18fec141b2e92a97617dcbb1c4332db06b1b549b0add5039f44108196ee8eb2
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            83c3712b-eaa0-4f30-8085-018cbd97a0fa.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\83c3712b-eaa0-4f30-8085-018cbd97a0fa.tmp
                                                                            • Size 203B
                                                                            • SHA256 48b0bc111cb0e894ddb3e430d291b0303d6a23fb3bb630d145fc662af8410b83
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            BookmarkMergedSurfaceOrderingf7749e24-1bca-419e-99db-1655b2c37e85.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarkMergedSurfaceOrderingf7749e24-1bca-419e-99db-1655b2c37e85.tmp
                                                                            • Size 6B
                                                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                            • MD5 SHA1 SHA512
                                                                            Submit Download

                                                                            Bookmarks
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                                                            • Size 36KB
                                                                            • SHA256 5a45498d7ca27929db9f2e52133c7d3458dfa0e326ecfe1e4322c715964aa7c0
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            BookmarksExtras
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                                                                            • Size 169KB
                                                                            • SHA256 d84d6300f67c2786c06396e2303c6d72e798e5a48d9c8ee226a246e455af7031
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            bcb2da20-160c-46dd-ace0-3b89d357a8b6.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\bcb2da20-160c-46dd-ace0-3b89d357a8b6.tmp
                                                                            • Size 48B
                                                                            • SHA256 5499424c8bf9b9899bd993f312b083b12ca8c76f937fac4b2ffcfdce465a5d6b
                                                                            • MD5 SHA1 SHA512
                                                                            Submit Download

                                                                            temp-index
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
                                                                            • Size 744B
                                                                            • SHA256 738bc0d0c3ccd1254770177545ad8d2c310469009ea9e67fb1ea2f04df029b89
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            the-real-index
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                            • Size 336B
                                                                            • SHA256 796cc3229316a29ea9d9b01a438049bee7678b2ce3865f446838061d1f6af976
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            data_2
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_2
                                                                            • Size 8KB
                                                                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                            Submit Download

                                                                            data_3
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_3
                                                                            • Size 8KB
                                                                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                            Submit Download

                                                                            main.js
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.8_0\main.js
                                                                            • Size 47KB
                                                                            • SHA256 9cc5e1dd96d76735499257c52d632a0a9e17ed4da929035067dadcc586000335
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            logo_128.png
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_128.png
                                                                            • Size 7KB
                                                                            • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            logo_16.png
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_16.png
                                                                            • Size 653B
                                                                            • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            logo_32.png
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_32.png
                                                                            • Size 1KB
                                                                            • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            logo_48.png
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_48.png
                                                                            • Size 2KB
                                                                            • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            logo_64.png
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_64.png
                                                                            • Size 2KB
                                                                            • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            service-worker-loader.js
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\service-worker-loader.js
                                                                            • Size 49B
                                                                            • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                                            • MD5 SHA1 SHA512
                                                                            Submit Download

                                                                            favicon_opera_one.png
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\favicon_opera_one.png
                                                                            • Size 2KB
                                                                            • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            reader_mode.js
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\reader_mode.js
                                                                            • Size 112KB
                                                                            • SHA256 17f8a5c1d70acee668cc6964317d88802d4409c32b0d7e292b95e1de8ddb16df
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            spotify_frame_interceptor.js
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\spotify_frame_interceptor.js
                                                                            • Size 5KB
                                                                            • SHA256 895ef6ae0efde6f5e8af23d1acbfac4a5351bda31c89d2e64c05f2de0181dd56
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            background.js
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\background.js
                                                                            • Size 87KB
                                                                            • SHA256 b199d4f989c63947c53a9d07450038cfe274b7a10e8cc7d688c4049ae14ef63e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            Icon_Light_Neutral.png
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Neutral.png
                                                                            • Size 2KB
                                                                            • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            popup.js.LICENSE.txt
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\popup.js.LICENSE.txt
                                                                            • Size 1KB
                                                                            • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            rules.json
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\rules.json
                                                                            • Size 839B
                                                                            • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            17bab618-b396-4620-9efd-e0ef691a203e.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\17bab618-b396-4620-9efd-e0ef691a203e.tmp
                                                                            • Size 27KB
                                                                            • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            208af353-0029-4be0-aa2a-b0d5950b90ce.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\208af353-0029-4be0-aa2a-b0d5950b90ce.tmp
                                                                            • Size 27KB
                                                                            • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            46bc6a34-32d6-4cbd-b87a-61d18264c70b.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\46bc6a34-32d6-4cbd-b87a-61d18264c70b.tmp
                                                                            • Size 27KB
                                                                            • SHA256 7aca076b4b1dccb2457284a51bddb5c43eacf93224ec1f9aedcdefb1fbc9b087
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            59d9c688-0e12-40d2-a3b4-cfd686099c07.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\59d9c688-0e12-40d2-a3b4-cfd686099c07.tmp
                                                                            • Size 27KB
                                                                            • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            db23f9f6-1c2b-45fa-81b5-711bb1e9cb3d.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\db23f9f6-1c2b-45fa-81b5-711bb1e9cb3d.tmp
                                                                            • Size 27KB
                                                                            • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            ee0e59bc-3e10-4a7a-a0ac-a05d00ceb1e0.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\ee0e59bc-3e10-4a7a-a0ac-a05d00ceb1e0.tmp
                                                                            • Size 27KB
                                                                            • SHA256 3a9c655a88437e331f50a23bb40cb1a3de86277cb1a9488c81c426598cfab0a3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            SCT Auditing Pending Reportsf07bc5d6-7c09-4085-be08-65a637480f2a.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\SCT Auditing Pending Reportsf07bc5d6-7c09-4085-be08-65a637480f2a.tmp
                                                                            • Size 2B
                                                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                            • MD5 SHA1 SHA512
                                                                            Submit Download

                                                                            Preferences
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                            • Size 15KB
                                                                            • SHA256 c1b826141ed6859c1cb3576d97f6ea4e58e9857c8923c2f3f3fdd67613c65d73
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            Preferences
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                            • Size 16KB
                                                                            • SHA256 bdc930a1b1183b3d35a656eb66a999fd43215d8ad7f89f52891c70ca6aa28655
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            Preferences
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                            • Size 15KB
                                                                            • SHA256 514ed7bc5949510a45c742ea7c576c066ffb8f449d877eaa85fd3b5b895f4af6
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            Preferences
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                            • Size 15KB
                                                                            • SHA256 6960e765bf004e2a323c808ac52e6316d84827f5c4e1bd56934c075039d537e0
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            Preferencesd99f1a29-55cc-40ea-97c4-bb93c9243804.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferencesd99f1a29-55cc-40ea-97c4-bb93c9243804.tmp
                                                                            • Size 10KB
                                                                            • SHA256 17e8a40fa7054381e4f6a032b046df951e6f26b894118014a3063f7fc6a3676d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            Secure Preferences
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                            • Size 82KB
                                                                            • SHA256 37d94cde71a76baf0a96113a0f811e0b8072b4d780a4235fb04084bdb0d11263
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            Secure Preferences
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                            • Size 108KB
                                                                            • SHA256 11279f72af65ed99396088cfcf49859465c242cf053c7f7ced26e90568cfae8e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            dec629ca-efca-41b6-916e-03adc54a8afe.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\dec629ca-efca-41b6-916e-03adc54a8afe.tmp
                                                                            • Size 72B
                                                                            • SHA256 247bb0b574171208a8d3fea20950cb03c0faae98ea773d9bf4f38455567f3ab9
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            the-real-index
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                            • Size 120B
                                                                            • SHA256 62fff2eb046a4e6946226795f4ac592b8ae48c204696f4e9bb096910ee832c5f
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            the-real-index
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                            • Size 360B
                                                                            • SHA256 bdf1465f3229f02ad9ad0f36d49fd54caca05fc83c5b1c4d2e8a798694fc98d7
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            2c343987-f917-441c-a6cc-6fb8ddcbddf7.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\2c343987-f917-441c-a6cc-6fb8ddcbddf7.tmp
                                                                            • Size 381B
                                                                            • SHA256 d6e2e91d985ae9dafdb62ca8bd75e92ec36a0f8af3f42500fcbdcff19d3f83af
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            f7d1ba85-d0d2-4cd1-a908-c3ef0f324da1.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\f7d1ba85-d0d2-4cd1-a908-c3ef0f324da1.tmp
                                                                            • Size 381B
                                                                            • SHA256 febc68e2898c1ce45c044243ede663165b0d1ac9d3ddebea57b6f9e1aefef797
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_3f39cbb1-fa93-497c-84f1-4e21fc6e46b7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3f39cbb1-fa93-497c-84f1-4e21fc6e46b7.raw
                                                                            • Size 493B
                                                                            • SHA256 515b14aacd6d5d55bcdc84f613cf5d993535e3dbeab08e3a5e9b8f137859cd1b
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_3f39cbb1-fa93-497c-84f1-4e21fc6e46b7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3f39cbb1-fa93-497c-84f1-4e21fc6e46b7.raw
                                                                            • Size 605B
                                                                            • SHA256 478038d77a441ef456b491c15c538ce95146494b15f44d8f7076be6766195b49
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_3f39cbb1-fa93-497c-84f1-4e21fc6e46b7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3f39cbb1-fa93-497c-84f1-4e21fc6e46b7.raw
                                                                            • Size 941B
                                                                            • SHA256 ec8e61d86386bea907a57cfc76d886f80079107640ad5a45c74ed8bc1ba7878e
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_3f39cbb1-fa93-497c-84f1-4e21fc6e46b7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3f39cbb1-fa93-497c-84f1-4e21fc6e46b7.raw
                                                                            • Size 1KB
                                                                            • SHA256 ac872bbd0ed582d8be8d16bc79aaaba646bcb301d76be34a999158539516170a
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_3f39cbb1-fa93-497c-84f1-4e21fc6e46b7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3f39cbb1-fa93-497c-84f1-4e21fc6e46b7.raw
                                                                            • Size 765B
                                                                            • SHA256 0704b5067a694365a900195ebf9bfe0813546b4559a7beb27ac29d178c0c41b1
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_3f39cbb1-fa93-497c-84f1-4e21fc6e46b7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3f39cbb1-fa93-497c-84f1-4e21fc6e46b7.raw
                                                                            • Size 957B
                                                                            • SHA256 5419d92b7a609ee482eb6a9dfa432a2b8d237340b7b1a0b26fa405632be1d129
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_3f39cbb1-fa93-497c-84f1-4e21fc6e46b7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3f39cbb1-fa93-497c-84f1-4e21fc6e46b7.raw
                                                                            • Size 1KB
                                                                            • SHA256 322ebebf2db38f89f293b77115f4ba6c348e8582b3eb62a488501376657b1e14
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_3f39cbb1-fa93-497c-84f1-4e21fc6e46b7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3f39cbb1-fa93-497c-84f1-4e21fc6e46b7.raw
                                                                            • Size 957B
                                                                            • SHA256 263e0cfb3ec4277d7c317017179403d00f5a907d48b9ec9ea181556b2c317b8e
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_3f39cbb1-fa93-497c-84f1-4e21fc6e46b7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3f39cbb1-fa93-497c-84f1-4e21fc6e46b7.raw
                                                                            • Size 1KB
                                                                            • SHA256 275dc24a616be36dfaec1f283b1f9c3e2bdbeb3f32e36853995bc737e62e18d4
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_3f39cbb1-fa93-497c-84f1-4e21fc6e46b7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3f39cbb1-fa93-497c-84f1-4e21fc6e46b7.raw
                                                                            • Size 1KB
                                                                            • SHA256 081750464d0a3ada127f5bf1408e6a228e6f47684909116c4881aaa711569338
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_3f39cbb1-fa93-497c-84f1-4e21fc6e46b7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3f39cbb1-fa93-497c-84f1-4e21fc6e46b7.raw
                                                                            • Size 1KB
                                                                            • SHA256 118114b94ae690e78df60bf13e409643cd01bb9052bf9048bbc11587e60a4fc5
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 1KB
                                                                            • SHA256 e289526f247bafba744f15623ff628c6b2466711252ed48e61dcb887c1a49c54
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 2KB
                                                                            • SHA256 e032c108653dfbc07cc82b3222e1d4a910be2b7faa64efb04ed9fe161191c5be
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 2KB
                                                                            • SHA256 75704fda738597116d70a93e0c4102ff1dd6f4bfe639d59ca73d01f7d17ec5ae
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 3KB
                                                                            • SHA256 0268923fe7d5a4198422cd5d73914d47808455e109c9966cc7debc1cfc3822b3
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 9KB
                                                                            • SHA256 618b517e7da6b542d14d19634562bea526d4898e43cb4135aa5cebbff56855de
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 9KB
                                                                            • SHA256 b8d67e381bf7b4b72ddd1087eba86902ccabc618bc4076c8df82b4f0bac52ccf
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 9KB
                                                                            • SHA256 6ad54592f38d2a458ea7349c8b10eadf3ed39f561f60b31ce1fd0a72651afd0e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 1fa8989c45ee1af909ad1922410f892008d48895f848308aa75832dbcf41308e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 01c57923a7dc0365ae7d72746b17cb95200c2aabfb157b68489076195699f7a5
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 11KB
                                                                            • SHA256 1aa0ea5534b1e7ae54d117563fc17f825ea69643c095f83024d7698defc63b33
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 1KB
                                                                            • SHA256 6192eca3f7988d396bc5af6a9bb2aabcac2c62d5b5205d71191e2af5a4c5d562
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 1KB
                                                                            • SHA256 b6008065e38a3d6e8f258d8d66d4aea0d216bc7af5ec45aaadec469c11b51557
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 1KB
                                                                            • SHA256 a3ca0684756e02dbf270f007cd03326991142a4534ec9989b79368bd91df71e0
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 1KB
                                                                            • SHA256 1e7c267489c70e1a9e98e70fcd16ed6665298d3ef5a7293b282f891ad9967fac
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 1KB
                                                                            • SHA256 679a412e4a19782aa2e8b9ea5d0df860ebc16bd44891ed3e8ea08b3ad27463c6
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 1KB
                                                                            • SHA256 c7fa355cd1d95e22dc31c1e36d0706d16a7b0ce8d4f79b343637fab3cc4f4f0c
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 1KB
                                                                            • SHA256 19d236593981394a6d5c6c360a8a8a7cff37b425b677bc32ac3b7e33b7fc0e1c
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 2KB
                                                                            • SHA256 d756a33c2bb8728203afbfb184fde01ed0250cf2dddf348a7a34192109c9e5be
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 3KB
                                                                            • SHA256 7c371ca3c5c6240edb5786eacfff866a68d010f118d8c8da4433dd4a1adf084e
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 3KB
                                                                            • SHA256 119d3f7ad0201afdfe4ab1d561fdf0b87a023f0e4e07cedbb507555f0914910a
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 8KB
                                                                            • SHA256 ddd8d6de4aa3d756a16afc47a339b1711fcbd725b3e1ddb086e017585eef9a8f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 9KB
                                                                            • SHA256 ecfa648febdf58d5fb2b0b4712ca2fb38c06f5c238e632ddac4c8539b18021c5
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 9KB
                                                                            • SHA256 68aef6a4d4bf460c42f2c0fb7eb132b98943c499a4143b5ad65e928034282bec
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 9KB
                                                                            • SHA256 19627a612d5e7e630e71da0cd6ccf96984d6c49baa36100d868536e2cc6d288d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 9KB
                                                                            • SHA256 723c0a6728b02340a3c9dc5fc841f7828cb85fb2cd27b3d9a69aa8166c6cda89
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 14baf83b4ca3cba3b734d98e4d5fbb86bb7b4959b3b9104bcf915bf6f0115b12
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 9KB
                                                                            • SHA256 b31083d35db6285bc18f02e2c37946de02702824a47231be1f0c169832b188a7
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 46f8cb25d770ac0e9a143151befeebd40c37762a362250e2bb8a21c05789898e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 0d7385e6a5ca2fd84547cedef7cf69b1d1c6f8782554049dcb442efd3ed9f43c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 4daa921d9da7d49d4d1a783aecf4c2e0f3df08f8ee4197875d99f3bad4f5a1c1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 9523a38c2c71d1f687ed077323fd3f703252dc3d36b052ec4840809594f759b1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 a50375118812999af63e520b028ada30f1eed4c8caebffaadc6c1b048ff20578
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 e654a389cb870eda2bac02f495931f2075dada981d6793c0b6848db4922ae536
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 f8c51368ec5d84aa3200b3f05cad97d6c5af9fd9357a69d9951a19dac9fe2dcd
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 d0f10f4bc55374eab0655037ad7ce5ac850a1222600af19385edbbf7728fbb57
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 6e655fa89bdd05290d2a3dbf08a201f8db9522cc7117d055fc0f873b34b6f8cd
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 1211baa2c48f5fa4d2f9f4af186326aa95429f6c3bae95bd7e12a4eb4409457d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 52829b7385d3ef8ff9fe694b477a107c9ae399b927096b77ba319810a58a5a83
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 8431d9131035f92ad86ee7549ce9b0206452fc53f9fabe86ec4c611eaca7b64e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 4430e257254969aea94bcac95e10098d7db0dfdbc692ec7e96e86d76b3edf3f9
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 58ab17ab45d66c2138b2d04075723fe0a6f9ab15b9118c8a9407b244358e5ed6
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 f8aee23e871d5055d3d5160c441c72b4d5f8d404f91275c4896f60862708f801
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 c7e1e1ee3f0b6b8d24f82eada9c7dea8a6acfd7d0d8f10ecdb11614d66132787
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 534b75b9230c8e46eb52224439822f0b447bb909450075254b215e569d613f5e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 78a36425349a29bde30bbe69b69b766c9aaa1ab34a87421e2cc67113f47a811c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 36ecbf01c5da8ca0d61120eefdb8e5c16fd1ca7939d7972120c0930f86635ab4
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 cbd7e30d1b42043d65c5748f203cbad8fff9bfafe8e3a50dc1aec979c454764a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 860d6473ad3885bf64e0c2649bc6b7a50966bcf41f55d4def330ade404b2385c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 c430055c2b4090fa2876a381e0ffa9a9930e56735793a3a5f664f0c066b9b1b8
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 78ab0909d7f5f4980d728ff1a684185f47e057fdf2c716a6ed5a82e45ec017ed
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 493B
                                                                            • SHA256 b42592e5051c0a0f6f0ee8909608290f67e906ac709aebed58ee5a3e1b259877
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 621B
                                                                            • SHA256 d29db94ad92524c13747659a63cd404dddce4d33c989a3df777c9e056b62d1df
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 1KB
                                                                            • SHA256 e8e30520641b2ee72b97779e1596497f9a3382896acd53237341d28861fff862
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 8KB
                                                                            • SHA256 547c641ee00f0b2b6b640c0108011aede36703c33c12981917157ef79cdd8a3c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 1KB
                                                                            • SHA256 d8da8200c8c18f22da4ae1f655bf6a5cba16328cedaa9d144e55f9cb8efc30a8
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 1KB
                                                                            • SHA256 4d6eb2cd683467307e1985cb0ed00ba061cc9ff0e5b358ca376d0cf5db789b55
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 8KB
                                                                            • SHA256 bce4510eff07a9524853945f7894b6de9a8c1e24311ada31ef8e52f06d942375
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 8KB
                                                                            • SHA256 eee9f953e5b1fc6d1ed81840dea0e990581d284cd2caab20c046b7bf31bb80c2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 9KB
                                                                            • SHA256 3fbc7094aaa4aced802d1316afaf4c702e10750179d8337ba9869563a0a2a1c3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 8KB
                                                                            • SHA256 9ef82037ce415fc087a08f62258fe43291eacdb66efe7465adab5665671715e9
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 2cbd719619081310b7814c170a140bb69b4574dd74af325f265ad839116498b2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 11KB
                                                                            • SHA256 0c9f5bc122524e34b75b1c44d8778bbef7cdc053cbb07d9fdc7de34170f2c248
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 d793ff0e227944d6fe743a2fb7175e185897c92373303c27e8538c0aaeb3b3f6
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 11KB
                                                                            • SHA256 2293146a9ba0e58f556230e4424ec465329fd2c88d080904b29b6e9d92250ef3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 11KB
                                                                            • SHA256 22ab9afb45d0615d0bbdf6d2615407c31ba541005aaa69a7ca99cf325cac609a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 925B
                                                                            • SHA256 a83bfe56c1e1ebacc4180f4edc197c37956dc646f4aab7e55cabcd24b32c6160
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 973B
                                                                            • SHA256 fb474df8e7219fd448ae43053f976e12a20324766303a95d0c88b4ecc80bc7da
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 9KB
                                                                            • SHA256 48f16c5ed3cf492cac7e3eceb3765fa3b6148c429a767e55b439eca5449bc991
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 8KB
                                                                            • SHA256 fc7d96a1b12ff0ec8d8d69f092ac79e93cfd09200f543c2cbe726132b27aa700
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 9KB
                                                                            • SHA256 d13d25dc759e79a58793beb94cf474e3c3f9f0729efd52dc8b66c236da30f358
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 9KB
                                                                            • SHA256 9d93833d32452e41ddea6920084b422fedee8a0a00bae04fbbf7beb9d1f27344
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 9KB
                                                                            • SHA256 42088d1de8a0cca75d27d9ba14e1dad6219c80c4d96a6d4c0f22ec1c12c03c95
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 269ef361c0485231ce0952622bda40f504941e45556ccf90fd4a8fc25073422a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 2fa4770edd3dc38ebd690b7a85255c3a4a900ad348320aecd8dc2aeb092754a3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 5f78673399ce92d2badd71ceeeced73bbb29665b13201200a249848d0216b22a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 c874d6e013a4d8f45cec202c7eaf5e3549e1b8e1ccc03015dce42162ace17f33
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 cf50375111bc45146f79b2328b1a420e2e566fac7dd88f50287b50d6190a6806
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 2e53b646e341b08d5c7c7502629c906e03ea0781a124db0d23f575f10e0132db
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 11KB
                                                                            • SHA256 1f24e696f14ec31a108a5a0b126a9115175b8ab72c57529771e0abb4316bde8c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 11KB
                                                                            • SHA256 9609ae9a915c2458e92db0e6dd19fd54262db2a9fe96226f693e54aa09544847
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 d321f29b326d79d66c070ad8608f0d64338e30ecf7f89fa31ddbe9cd8e5ecbbd
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 11KB
                                                                            • SHA256 b391f3e3cd1af4162cdb689d9ea0b94ba8cb12703484bd3989e6d6520a2e7723
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 1KB
                                                                            • SHA256 b6437d00f610c0027b3482d018acc54ee33b2b170005d8cceb063b311a332ebe
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 fa8be3930b9003e13f86acc27ddaaa68f53a4ec88ed0e5bbe453b836a5497e22
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 cb84f7662ce558a5b65270e8bac241181dae8147c730495b250b1f621786dc43
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 10KB
                                                                            • SHA256 7e50922d5c02049d506ee589972650c27438c64f8fd05467002bb5685ec2c3da
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 11KB
                                                                            • SHA256 7354d411064ffbc3d114b49722b503026eaf0406fc48e0191bf43d6e11379a48
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 11KB
                                                                            • SHA256 54441100b4dec9ad34edbeaea4f99fa7a910076d2516d1b0863461ac10aa8fc3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 11KB
                                                                            • SHA256 f17b8dd6a3f88869c9152c9e51051404776070accfedfb69ecc94654dc2cb753
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 11KB
                                                                            • SHA256 54e9e7ee8ed0ae80bf45e13f656bb94bdd9f09e201382144531bd8907b14923d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 3KB
                                                                            • SHA256 08acae4da9cc48cf7d4e1de25f0fe67aa927844c600d069207490949ef82b8da
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.raw
                                                                            • Size 12KB
                                                                            • SHA256 4163bf35944a69e54b63c6b1a5254e2093f63dc39a866906593dd80d5f0b9251
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.rawe7f80743-00c3-4353-815f-52ac438efa39.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4e2bdec3-1b45-4d88-8491-e0d38576c1f7.rawe7f80743-00c3-4353-815f-52ac438efa39.tmp
                                                                            • Size 749B
                                                                            • SHA256 367942157312159c94099b709cfda119166fc9cb7e905c7e8d1f102acca2e3c1
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            CURRENT
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\CURRENT
                                                                            • Size 16B
                                                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                            • MD5 SHA1 SHA512
                                                                            Submit Download

                                                                            ca4b5fdd-d8ff-46f6-8e62-cb9dcbc8389c.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ca4b5fdd-d8ff-46f6-8e62-cb9dcbc8389c.tmp
                                                                            • Size 490B
                                                                            • SHA256 e5de7e5eba4e6718b728b609a25a73b7f7f9b2bfbd8a6ce2aa8e6cc7e4b5517e
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            MANIFEST-000001
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\shared_proto_db\metadata\MANIFEST-000001
                                                                            • Size 41B
                                                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                            • MD5 SHA1 SHA512
                                                                            Submit Download

                                                                            ssdfp5752.0.2100755295
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5752.0.2100755295
                                                                            • Size 1KB
                                                                            • SHA256 0154b68627d18cc90fbb9fd610901238df9a387187e7dd4b0744a295ca32b1c2
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp5752.0.2100755295
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5752.0.2100755295
                                                                            • Size 2KB
                                                                            • SHA256 49d43f2b91b9e3a99aff88c71405f387ea6cf6ef15ecde99b28a86aa4d374a9d
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp5752.0.2100755295
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5752.0.2100755295
                                                                            • Size 265B
                                                                            • SHA256 2a6e66836ae251b600145d73e1928586ed40cb0f40f7448f9e659682fbfd1369
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 1KB
                                                                            • SHA256 6a07b5c0cc5b30d3c0a858e761aae760bcf3346eb4b5ce7830cee76debc77a12
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 583B
                                                                            • SHA256 eb4385a4f922cff7ab551c1828a9af3e5bd12487fd62b3c4eca089ed9eead41e
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 771B
                                                                            • SHA256 fce2578957b478facbc1ba881f1b0b58b0036fafc389a33a501505637f84f204
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 955B
                                                                            • SHA256 11e9c57deb2f12c939d71fd92f99f3c931253d561c3d9335dca5fa84f5dad040
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 1KB
                                                                            • SHA256 1df6a1438444184ab124b401296d1318b20d25d0f466d92801d13c6566832b0a
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 1KB
                                                                            • SHA256 73c96340e7b1f5d079616b642cf7fabdf5ac06c75df2b8022637002a343ec45c
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 1KB
                                                                            • SHA256 c9e2a2283b7914ea9472bd58bb67c8f319a6b4c24e8125801e372fe43787deb5
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 1KB
                                                                            • SHA256 5fa745be2623c1db1c43f9e63c832483ac8df0cc6064370d4aa2b7a2645418a3
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 1KB
                                                                            • SHA256 38aec338072b0d8167f17bc03ccc10c57b0c85dbaf29da9a6fb09d4f7da2197b
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 3KB
                                                                            • SHA256 2d26e81adf915831dc8f47bbbf8f92061ce3ee515a3680c4f3197539d2e7cb0b
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 3KB
                                                                            • SHA256 3689e1f86165b8317b5eeaacab1d5fdb7e0ad1b1d9e6740a8d6b2dc170c3fe19
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 3KB
                                                                            • SHA256 cb67693c951900a27683af5726adb1c701142af9cc3f4e814036581712761321
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 3KB
                                                                            • SHA256 1764fc09405dd1850c66d496c73d7e8dce700e8eb6b66b64c349566fc4938d51
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 3KB
                                                                            • SHA256 13a3f1afc95b73f34adcdd6712e1b75776582d36de92d5d2482c3ba0801790ae
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 3KB
                                                                            • SHA256 a951041d2c2dff6d1fcc4d27e2c78010dcfdd6fe4a8b683af0c6215399dd8f1a
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 4KB
                                                                            • SHA256 201496aee932eb86ed300deb7c0923ee2aee6cee6ec5149c0d9d0b1fcda50422
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 681B
                                                                            • SHA256 595ea2fcefca6bd216f9cba5d22a34f48aa983573062c4c33b49dd64d8528962
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 861B
                                                                            • SHA256 926b042ad0063ce482d40e1b8a6d5bcba5ed322d0b83c5c54cac94f580746d79
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 1KB
                                                                            • SHA256 56a78d5baae1975bb9fcd802fe71f6c38079ee6684677e750f6506f011c3863c
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 1KB
                                                                            • SHA256 605aebecbe3050567a9db8076d41863617ec7615dc6979b0b57d215c57a2f435
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 1KB
                                                                            • SHA256 a21fcc172d60b9d1c50f808b7f8372b8879c80c3dd9c43a4a80faf0e73126aaf
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 1KB
                                                                            • SHA256 c4b051cfdc579ac0df507b72835c50dc315e84da6852fed99b10c6c407bcaf0c
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 2KB
                                                                            • SHA256 f49453315935e29c1856e420d62ea60587c041b8d9988280f1153ea9c69f32e3
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 3KB
                                                                            • SHA256 b646ad5c001723d0954acc39328a3f969f20fc55ebd680c3745e5e3975954210
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 1KB
                                                                            • SHA256 61807e7a7d3ffc0be6efda4b287155c2e2e2523afc04fd9b28ca3f1822defe85
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.0.486741353
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.0.486741353
                                                                            • Size 1KB
                                                                            • SHA256 e08b538e14080e2a69fc9f7c27b21beb34a0c5f1ee54b41119f05c9958ff66d3
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.1.1840169965
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.1.1840169965
                                                                            • Size 294B
                                                                            • SHA256 84e9978d39cb658db1aa7a4eaeac1802c044df0073538c65aefdb1492a9c0bc2
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.1.1840169965
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.1.1840169965
                                                                            • Size 484B
                                                                            • SHA256 340feb72bab44396bba4b7583cf5b37050893cd15a43cd9692a9f49ea0386620
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.1.1840169965
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.1.1840169965
                                                                            • Size 575B
                                                                            • SHA256 455ea7c449108d56f2e1e9aa3e6a1d8010b230c5c312d9c1cf071741c90b3ba6
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.1.1840169965
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.1.1840169965
                                                                            • Size 910B
                                                                            • SHA256 1724306cdd18c5f95ce4ae12a3e7efdbe4add8934ed5602eef6c9e73d5bdb43b
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.1.1840169965
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.1.1840169965
                                                                            • Size 388B
                                                                            • SHA256 8c7ea959887062c77f76cf204cf7045a100e5096b4206ad227a7a470c18fe97c
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.1.1840169965
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.1.1840169965
                                                                            • Size 935B
                                                                            • SHA256 ba228bb5d3fc0a929b85c6e6fa651b7e911fec69d54355a3e26e02fd66e1a8f5
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.1.1840169965
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.1.1840169965
                                                                            • Size 667B
                                                                            • SHA256 afc510144b02202ef3591867b4eced5bcd373f777c36898c1ee685132169d044
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.1.1840169965
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.1.1840169965
                                                                            • Size 886B
                                                                            • SHA256 f881fb6f9ba6beea47ec586f4cedf74a5e50924228441c31be874d22a0b6c28b
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.1.1840169965
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.1.1840169965
                                                                            • Size 764B
                                                                            • SHA256 41ce459ee99c33d121c4790338636d7b77eefe070db85cc0c8cd215e61235869
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.1.1840169965
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.1.1840169965
                                                                            • Size 857B
                                                                            • SHA256 1847dc8b043f90f1718aa7f0eb8dff7c32b03e31d2327a9eda713ad0ce1f4eac
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            ssdfp7668.1.1840169965
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7668.1.1840169965
                                                                            • Size 910B
                                                                            • SHA256 857111c4a0994412568293f48fea65aebe79cc484950e2a89415730a505e5eb1
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            suggestions_cache.jsondc96343a-d583-4d5a-97d8-06f4b80f2d0f.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.jsondc96343a-d583-4d5a-97d8-06f4b80f2d0f.tmp
                                                                            • Size 652KB
                                                                            • SHA256 235eca6264c4496eb3825992958cdadfbb7832d09deb53ae250d702bb6b8b1d6
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            data_0
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_0
                                                                            • Size 8KB
                                                                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                            Submit Download

                                                                            data_1
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
                                                                            • Size 264KB
                                                                            • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                            Submit Download

                                                                            Local State
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                            • Size 2KB
                                                                            • SHA256 eb4165747c753e2b598c26c67c53d4f386203d5b031300dbd2c8ea74da350bc3
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            Local State
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                            • Size 3KB
                                                                            • SHA256 88bc81f1c2e6b090f862eb9ddbfa0795ffe50834c9e61397ba8c264c6776634c
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            Local State
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                            • Size 4KB
                                                                            • SHA256 85f0704f135fdce91f4f47ef52d09c1922ce88347b944bd7ad7337116ab7c59f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            Local State
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                            • Size 3KB
                                                                            • SHA256 11d045b59357b88ef55a86bac906cfbcde825ddb83de1d918ed7de446093713d
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            VariationsSeedV2
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                            • Size 19B
                                                                            • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                                            • MD5 SHA1 SHA512
                                                                            Submit Download

                                                                            VariationsSeedV2
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                            • Size 11B
                                                                            • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                                            • MD5 SHA1 SHA512
                                                                            Submit Download

                                                                            assistant_prefs.json
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
                                                                            • Size 151B
                                                                            • SHA256 1f5f617753c8a79e299b7f2dded33fbc24ea35940ff621288729131a5579b080
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            fe8c826d-c2c6-4686-a933-a2cc9560a10d.tmp
                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\fe8c826d-c2c6-4686-a933-a2cc9560a10d.tmp
                                                                            • Size 2KB
                                                                            • SHA256 59b5a4871b7dc500e5a4b28efab1e61b07fb061a16631052b6ddd64d71c0932e
                                                                            • MD5 SHA1 SHA512 TLSH
                                                                            Submit Download

                                                                            perfhost.exe
                                                                            • Path C:\Windows\SysWOW64\perfhost.exe
                                                                            • Size 1.4MB
                                                                            • SHA256 bececef8e275009c6bc850a7caf8b3dd00d86dd6a8d44c434d29ee206c33d883
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            AgentService.exe
                                                                            • Path C:\Windows\System32\AgentService.exe
                                                                            • Size 1.7MB
                                                                            • SHA256 3f189235e8565a4c44a85f8771f02f10a5f6c359d430d30891815a0c3199c9f3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            DiagnosticsHub.StandardCollector.Service.exe
                                                                            • Path C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
                                                                            • Size 1.5MB
                                                                            • SHA256 473dded2fc137fc6051f94684c8db6e2280df27a941cf9f8f7d53816f835fcb4
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            FXSSVC.exe
                                                                            • Path C:\Windows\System32\FXSSVC.exe
                                                                            • Size 1.2MB
                                                                            • SHA256 70b1dab44b339836172f6c4979907842e7e818f5e2616e8f5463e536ae906824
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            Locator.exe
                                                                            • Path C:\Windows\System32\Locator.exe
                                                                            • Size 1.4MB
                                                                            • SHA256 ae6f1117d1d1e5ddc4f6e61560717e32db96fa6eb0da17ec454c9ea359cbff76
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            ssh-agent.exe
                                                                            • Path C:\Windows\System32\OpenSSH\ssh-agent.exe
                                                                            • Size 1.7MB
                                                                            • SHA256 c5be52e96f5d2f2115744d669379e946e1d095393bc302e153bbe9c30424b07d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            PerceptionSimulationService.exe
                                                                            • Path C:\Windows\System32\PerceptionSimulation\PerceptionSimulationService.exe
                                                                            • Size 1.5MB
                                                                            • SHA256 64d5903cf5551567f8aa7f8f24e3b0e81cadbc0fcb2209b81933cd329a7e11d1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            SearchIndexer.exe
                                                                            • Path C:\Windows\System32\SearchIndexer.exe
                                                                            • Size 1.4MB
                                                                            • SHA256 dcf7688f3ab2d08af532b2e91bc769851a2cde1bb85880be5757f2f16d7488f8
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            SensorDataService.exe
                                                                            • Path C:\Windows\System32\SensorDataService.exe
                                                                            • Size 1.8MB
                                                                            • SHA256 8645e14299fe39098dbd6a023a4f52f1790bee45a40f4090d2e12fb75903a73f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            Spectrum.exe
                                                                            • Path C:\Windows\System32\Spectrum.exe
                                                                            • Size 1.4MB
                                                                            • SHA256 69b4e92dd912664beffce39cda822c4b86f76aaa975cda06d3534b5cbe9040e2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            TieringEngineService.exe
                                                                            • Path C:\Windows\System32\TieringEngineService.exe
                                                                            • Size 1.7MB
                                                                            • SHA256 8f6ee4b86692ae2b602fd49860d0b14cf1e683a00029804b3b0ffdab21f18124
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            VSSVC.exe
                                                                            • Path C:\Windows\System32\VSSVC.exe
                                                                            • Size 2.0MB
                                                                            • SHA256 b50d834422b1ea1c7542d4719ea274b972620e8aa280be9517e2c7b53743c8f3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            alg.exe
                                                                            • Path C:\Windows\System32\alg.exe
                                                                            • Size 1.5MB
                                                                            • SHA256 66def42bbccb4b20c24a658ad1501406652585e2dce1777670f59c6b82106d07
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            msdtc.exe
                                                                            • Path C:\Windows\System32\msdtc.exe
                                                                            • Size 1.5MB
                                                                            • SHA256 fd04b3c6ca9f095c21a338ac9e5a25a9148bdca2ef8327bae8763a7f8fb53413
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            snmptrap.exe
                                                                            • Path C:\Windows\System32\snmptrap.exe
                                                                            • Size 1.4MB
                                                                            • SHA256 643df0f20a1bc7440625a700dcbfc045da29823608fa92affd12c53c8826137c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            vds.exe
                                                                            • Path C:\Windows\System32\vds.exe
                                                                            • Size 1.3MB
                                                                            • SHA256 17dd3551ca0f9a2955f38a08287b368fd8782352bcc4376ef6710a551b127e70
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            WmiApSrv.exe
                                                                            • Path C:\Windows\System32\wbem\WmiApSrv.exe
                                                                            • Size 1.6MB
                                                                            • SHA256 ab6c7d19b7190560cc0d4594a39a349d3e63e042605bcccec89f631aa6ebb929
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            wbengine.exe
                                                                            • Path C:\Windows\System32\wbengine.exe
                                                                            • Size 2.1MB
                                                                            • SHA256 9f81186d76771c8d1019bb135fd23486c8512d9096d7d441d151cab709ad629c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                            Submit Download

                                                                            memory/404-132-0x0000000140000000-0x000000014017E000-memory.dmp
                                                                            Download

                                                                            memory/404-257-0x0000000140000000-0x000000014017E000-memory.dmp
                                                                            Download

                                                                            memory/404-133-0x0000000000B40000-0x0000000000BA0000-memory.dmp
                                                                            Download

                                                                            memory/404-139-0x0000000000B40000-0x0000000000BA0000-memory.dmp
                                                                            Download

                                                                            memory/440-130-0x0000000140000000-0x00000001401A2000-memory.dmp
                                                                            Download

                                                                            memory/440-121-0x00000000007B0000-0x0000000000810000-memory.dmp
                                                                            Download

                                                                            memory/440-127-0x00000000007B0000-0x0000000000810000-memory.dmp
                                                                            Download

                                                                            memory/440-246-0x0000000140000000-0x00000001401A2000-memory.dmp
                                                                            Download

                                                                            memory/556-101-0x0000000001510000-0x0000000001570000-memory.dmp
                                                                            Download

                                                                            memory/556-95-0x0000000001510000-0x0000000001570000-memory.dmp
                                                                            Download

                                                                            memory/556-103-0x0000000140000000-0x00000001401A8000-memory.dmp
                                                                            Download

                                                                            memory/556-99-0x0000000140000000-0x00000001401A8000-memory.dmp
                                                                            Download

                                                                            memory/556-89-0x0000000001510000-0x0000000001570000-memory.dmp
                                                                            Download

                                                                            memory/1188-1803-0x0000016E155D0000-0x0000016E155E0000-memory.dmp
                                                                            Download

                                                                            memory/1188-1802-0x0000016E155D0000-0x0000016E155E0000-memory.dmp
                                                                            Download

                                                                            memory/1188-1804-0x0000016E155D0000-0x0000016E155E0000-memory.dmp
                                                                            Download

                                                                            memory/1692-0-0x0000000000400000-0x000000000058C000-memory.dmp
                                                                            Download

                                                                            memory/1692-1984-0x0000000000400000-0x000000000058C000-memory.dmp
                                                                            Download

                                                                            memory/1692-8-0x0000000000820000-0x0000000000887000-memory.dmp
                                                                            Download

                                                                            memory/1692-1-0x0000000000820000-0x0000000000887000-memory.dmp
                                                                            Download

                                                                            memory/1692-98-0x0000000000400000-0x000000000058C000-memory.dmp
                                                                            Download

                                                                            memory/1700-270-0x0000000000400000-0x000000000056A000-memory.dmp
                                                                            Download

                                                                            memory/1700-146-0x0000000000400000-0x000000000056A000-memory.dmp
                                                                            Download

                                                                            memory/1888-543-0x0000000140000000-0x0000000140179000-memory.dmp
                                                                            Download

                                                                            memory/1888-295-0x0000000140000000-0x0000000140179000-memory.dmp
                                                                            Download

                                                                            memory/1888-292-0x00000000007E0000-0x0000000000840000-memory.dmp
                                                                            Download

                                                                            memory/1888-286-0x00000000007E0000-0x0000000000840000-memory.dmp
                                                                            Download

                                                                            memory/1888-316-0x0000000001B10000-0x0000000001B20000-memory.dmp
                                                                            Download

                                                                            memory/1888-1800-0x000000000D630000-0x000000000D638000-memory.dmp
                                                                            Download

                                                                            memory/1888-378-0x000000000A200000-0x000000000A208000-memory.dmp
                                                                            Download

                                                                            memory/1888-332-0x0000000001DC0000-0x0000000001DD0000-memory.dmp
                                                                            Download

                                                                            memory/2032-890-0x0000023C4DDC0000-0x0000023C4EDC0000-memory.dmp
                                                                            Download

                                                                            memory/2308-243-0x0000000000B80000-0x0000000000BE0000-memory.dmp
                                                                            Download

                                                                            memory/2308-517-0x0000000140000000-0x0000000140147000-memory.dmp
                                                                            Download

                                                                            memory/2308-237-0x0000000000B80000-0x0000000000BE0000-memory.dmp
                                                                            Download

                                                                            memory/2308-247-0x0000000140000000-0x0000000140147000-memory.dmp
                                                                            Download

                                                                            memory/2356-182-0x0000000140000000-0x0000000140169000-memory.dmp
                                                                            Download

                                                                            memory/2356-178-0x00000000006D0000-0x0000000000730000-memory.dmp
                                                                            Download

                                                                            memory/2356-172-0x00000000006D0000-0x0000000000730000-memory.dmp
                                                                            Download

                                                                            memory/2356-431-0x0000000140000000-0x0000000140169000-memory.dmp
                                                                            Download

                                                                            memory/2744-206-0x0000000140000000-0x00000001401D5000-memory.dmp
                                                                            Download

                                                                            memory/2744-203-0x0000000000C90000-0x0000000000CF0000-memory.dmp
                                                                            Download

                                                                            memory/2744-477-0x0000000140000000-0x00000001401D5000-memory.dmp
                                                                            Download

                                                                            memory/2840-112-0x0000000000C90000-0x0000000000CF0000-memory.dmp
                                                                            Download

                                                                            memory/2840-106-0x0000000000C90000-0x0000000000CF0000-memory.dmp
                                                                            Download

                                                                            memory/2840-220-0x0000000140000000-0x000000014018C000-memory.dmp
                                                                            Download

                                                                            memory/2840-114-0x0000000140000000-0x000000014018C000-memory.dmp
                                                                            Download

                                                                            memory/3148-885-0x0000023BDEDA0000-0x0000023BDFDA0000-memory.dmp
                                                                            Download

                                                                            memory/3676-235-0x0000000140000000-0x00000001401C0000-memory.dmp
                                                                            Download

                                                                            memory/3676-230-0x0000000000BB0000-0x0000000000C10000-memory.dmp
                                                                            Download

                                                                            memory/3676-223-0x0000000000BB0000-0x0000000000C10000-memory.dmp
                                                                            Download

                                                                            memory/3676-229-0x0000000140000000-0x00000001401C0000-memory.dmp
                                                                            Download

                                                                            memory/3676-233-0x0000000000BB0000-0x0000000000C10000-memory.dmp
                                                                            Download

                                                                            memory/3768-75-0x0000000000890000-0x00000000008F0000-memory.dmp
                                                                            Download

                                                                            memory/3768-87-0x0000000140000000-0x00000001402D4000-memory.dmp
                                                                            Download

                                                                            memory/3768-81-0x0000000000890000-0x00000000008F0000-memory.dmp
                                                                            Download

                                                                            memory/3768-192-0x0000000140000000-0x00000001402D4000-memory.dmp
                                                                            Download

                                                                            memory/3912-500-0x0000000140000000-0x00000001401D7000-memory.dmp
                                                                            Download

                                                                            memory/3912-498-0x00000000006B0000-0x0000000000710000-memory.dmp
                                                                            Download

                                                                            memory/3912-294-0x0000000140000000-0x00000001401D7000-memory.dmp
                                                                            Download

                                                                            memory/3912-160-0x00000000006B0000-0x0000000000710000-memory.dmp
                                                                            Download

                                                                            memory/3912-166-0x00000000006B0000-0x0000000000710000-memory.dmp
                                                                            Download

                                                                            memory/3912-169-0x0000000140000000-0x00000001401D7000-memory.dmp
                                                                            Download

                                                                            memory/4000-271-0x0000000140000000-0x0000000140216000-memory.dmp
                                                                            Download

                                                                            memory/4000-261-0x0000000000AD0000-0x0000000000B30000-memory.dmp
                                                                            Download

                                                                            memory/4000-267-0x0000000000AD0000-0x0000000000B30000-memory.dmp
                                                                            Download

                                                                            memory/4000-537-0x0000000140000000-0x0000000140216000-memory.dmp
                                                                            Download

                                                                            memory/4080-26-0x0000000000680000-0x00000000006E0000-memory.dmp
                                                                            Download

                                                                            memory/4080-34-0x0000000140000000-0x000000014017C000-memory.dmp
                                                                            Download

                                                                            memory/4080-32-0x0000000000680000-0x00000000006E0000-memory.dmp
                                                                            Download

                                                                            memory/4420-37-0x0000000140000000-0x0000000140135000-memory.dmp
                                                                            Download

                                                                            memory/4420-46-0x0000000000DA0000-0x0000000000E00000-memory.dmp
                                                                            Download

                                                                            memory/4420-51-0x0000000000DA0000-0x0000000000E00000-memory.dmp
                                                                            Download

                                                                            memory/4420-50-0x0000000140000000-0x0000000140135000-memory.dmp
                                                                            Download

                                                                            memory/4420-38-0x0000000000DA0000-0x0000000000E00000-memory.dmp
                                                                            Download

                                                                            memory/4716-105-0x0000000140000000-0x000000014017D000-memory.dmp
                                                                            Download

                                                                            memory/4716-21-0x0000000000540000-0x00000000005A0000-memory.dmp
                                                                            Download

                                                                            memory/4716-20-0x0000000140000000-0x000000014017D000-memory.dmp
                                                                            Download

                                                                            memory/4716-12-0x0000000000540000-0x00000000005A0000-memory.dmp
                                                                            Download

                                                                            memory/5256-181-0x0000000140000000-0x00000001402E9000-memory.dmp
                                                                            Download

                                                                            memory/5256-68-0x00000000007F0000-0x0000000000850000-memory.dmp
                                                                            Download

                                                                            memory/5256-70-0x0000000140000000-0x00000001402E9000-memory.dmp
                                                                            Download

                                                                            memory/5256-62-0x00000000007F0000-0x0000000000850000-memory.dmp
                                                                            Download

                                                                            memory/5304-891-0x000001845E930000-0x000001845F930000-memory.dmp
                                                                            Download

                                                                            memory/5332-538-0x0000000140000000-0x0000000140199000-memory.dmp
                                                                            Download

                                                                            memory/5332-283-0x0000000140000000-0x0000000140199000-memory.dmp
                                                                            Download

                                                                            memory/5332-273-0x00000000005D0000-0x0000000000630000-memory.dmp
                                                                            Download

                                                                            memory/5332-279-0x00000000005D0000-0x0000000000630000-memory.dmp
                                                                            Download

                                                                            memory/5464-217-0x00000000007D0000-0x0000000000830000-memory.dmp
                                                                            Download

                                                                            memory/5464-221-0x0000000140000000-0x00000001401B5000-memory.dmp
                                                                            Download

                                                                            memory/5464-494-0x0000000140000000-0x00000001401B5000-memory.dmp
                                                                            Download

                                                                            memory/5464-211-0x00000000007D0000-0x0000000000830000-memory.dmp
                                                                            Download

                                                                            memory/5840-255-0x00000000006C0000-0x0000000000720000-memory.dmp
                                                                            Download

                                                                            memory/5840-258-0x0000000140000000-0x00000001401FC000-memory.dmp
                                                                            Download

                                                                            memory/5840-249-0x00000000006C0000-0x0000000000720000-memory.dmp
                                                                            Download

                                                                            memory/5840-533-0x0000000140000000-0x00000001401FC000-memory.dmp
                                                                            Download

                                                                            memory/5900-193-0x0000000140000000-0x0000000140169000-memory.dmp
                                                                            Download

                                                                            memory/5900-454-0x0000000140000000-0x0000000140169000-memory.dmp
                                                                            Download

                                                                            memory/5900-190-0x00000000006B0000-0x0000000000710000-memory.dmp
                                                                            Download

                                                                            memory/6040-149-0x00000000006A0000-0x0000000000700000-memory.dmp
                                                                            Download

                                                                            memory/6040-282-0x0000000140000000-0x0000000140168000-memory.dmp
                                                                            Download

                                                                            memory/6040-155-0x00000000006A0000-0x0000000000700000-memory.dmp
                                                                            Download

                                                                            memory/6040-158-0x0000000140000000-0x0000000140168000-memory.dmp
                                                                            Download

                                                                            memory/6188-896-0x0000026F098E0000-0x0000026F0A8E0000-memory.dmp
                                                                            Download

                                                                            memory/6232-898-0x000001A552DE0000-0x000001A553DE0000-memory.dmp
                                                                            Download

                                                                            memory/6440-917-0x000001ED855B0000-0x000001ED865B0000-memory.dmp
                                                                            Download

                                                                            memory/6452-923-0x000001CF96D90000-0x000001CF97D90000-memory.dmp
                                                                            Download

                                                                            memory/6548-1799-0x000001DCC9FD0000-0x000001DCCAFD0000-memory.dmp
                                                                            Download

                                                                            memory/6588-1739-0x0000026425340000-0x0000026426340000-memory.dmp
                                                                            Download

                                                                            memory/6824-924-0x00007FF9E9110000-0x00007FF9E9111000-memory.dmp
                                                                            Download

                                                                            memory/6824-925-0x00007FF9E7750000-0x00007FF9E7751000-memory.dmp
                                                                            Download

                                                                            memory/7008-1101-0x000001D5C6B90000-0x000001D5C7B90000-memory.dmp
                                                                            Download

                                                                            memory/7016-1067-0x0000024692FA0000-0x0000024693FA0000-memory.dmp
                                                                            Download

                                                                            memory/7608-1790-0x00000210B7360000-0x00000210B8360000-memory.dmp
                                                                            Download

                                                                            memory/7736-1173-0x0000025684BB0000-0x0000025685BB0000-memory.dmp
                                                                            Download

                                                                            memory/8216-3693-0x0000000140000000-0x0000000140824000-memory.dmp
                                                                            Download

                                                                            memory/8216-3188-0x0000000140000000-0x0000000140824000-memory.dmp
                                                                            Download

                                                                            memory/9440-3691-0x0000000140000000-0x0000000140824000-memory.dmp
                                                                            Download

                                                                            memory/9440-3206-0x0000000140000000-0x0000000140824000-memory.dmp
                                                                            Download

                                                                            memory/10040-3694-0x0000000140000000-0x0000000140824000-memory.dmp
                                                                            Download

                                                                            memory/10040-3288-0x0000000140000000-0x0000000140824000-memory.dmp
                                                                            Download

                                                                            memory/10352-3079-0x0000000140000000-0x0000000140824000-memory.dmp
                                                                            Download

                                                                            memory/10352-3650-0x0000000140000000-0x0000000140824000-memory.dmp
                                                                            Download