Overview

overview

8

Static

static

3

2026-09-24...at.exe

windows10-2004-x64

8

2026-09-24...at.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    24/09/2026, 03:09

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-09-24_b1407aa6ec29650e434fd3c9983432d5_amadey_elex_hellokitty_luca-stealer_njrat.exe
  • Size 1.5MB
  • Sample260924-dnghascf69
  • SHA256 9d27846404ab86666515e0f385c0c61c6a70bbbf2b73cc50a80cfffccdf9cb67
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarediscoverypersistenceprivilege_escalationspywarestealer

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 4 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 54 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 41 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 14 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 13 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 36 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 9 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 49 IoCs
  • Suspicious behavior: EnumeratesProcesses 37 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-09-24_b1407aa6ec29650e434fd3c9983432d5_amadey_elex_hellokitty_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-09-24_b1407aa6ec29650e434fd3c9983432d5_amadey_elex_hellokitty_luca-stealer_njrat.exe"
    1⤵
    • Downloads MZ/PE file
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4076
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" /allusers=0 /silent
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:3336
      • C:\Users\Admin\AppData\Local\Temp\7zS80D65E6A\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS80D65E6A\installer.exe /allusers=0 /silent --server-tracking-blob=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
        3⤵
        • Downloads MZ/PE file
        • Executes dropped EXE
        • Enumerates connected drives
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:2176
        • C:\Users\Admin\AppData\Local\Temp\7zS80D65E6A\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS80D65E6A\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff7151e69d8,0x7ff7151e69e8,0x7ff7151e69f8
          4⤵
          • Executes dropped EXE
          PID:2600
        • C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:3788
        • C:\Users\Admin\AppData\Local\Temp\7zS80D65E6A\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zS80D65E6A\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=2176 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\opera_package_20260924040944" --session-guid=45f3127f-36a9-4276-a26d-40d5d433dc91 --server-tracking-blob=N2MyZWFhMThmYWEyZmY5ZWE0YWVkZWVjYTk0Y2U0MGM2NDNkY2Q1M2IyY2JhZTQwMTJlZWRjOGUzOGMzNjhjMTp7ImNvdW50cnkiOiJHQiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijp7Im5hbWUiOiJvcGVyYSJ9LCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fc291cmNlPXdyayZ1dG1fbWVkaXVtPXBiJnV0bV9jYW1wYWlnbj1zcG90aWZ5X29wZXJhIiwic3lzdGVtIjp7InBsYXRmb3JtIjp7ImFyY2giOiJ4ODZfNjQiLCJvcHN5cyI6IldpbmRvd3MiLCJvcHN5cy12ZXJzaW9uIjoiMTEiLCJwYWNrYWdlIjoiRVhFIn19LCJ0aW1lc3RhbXAiOiIxNzkwMjE5Mzg0LjIzMjYiLCJ1c2VyYWdlbnQiOiJPcGVyYSBJbnN0YWxsZXIvMS4wIiwidXRtIjp7ImNhbXBhaWduIjoic3BvdGlmeV9vcGVyYSIsIm1lZGl1bSI6InBiIiwic291cmNlIjoid3JrIn0sInV1aWQiOiI2YTBkYTEwYi02NzI2LTRmOTQtYTc3OS0wYThiNDhkYTk0OTcifQ== --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=1008000000000000
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Suspicious use of WriteProcessMemory
          PID:1900
          • C:\Users\Admin\AppData\Local\Temp\7zS80D65E6A\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zS80D65E6A\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x2c4,0x2c0,0x2c8,0x280,0x2cc,0x7ff7151e69d8,0x7ff7151e69e8,0x7ff7151e69f8
            5⤵
            • Executes dropped EXE
            PID:3916
          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe" --backend --initial-pid=2176 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\opera_package_202609240409441" --session-guid=45f3127f-36a9-4276-a26d-40d5d433dc91 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=136.0.6008.22
            5⤵
            • Executes dropped EXE
            • Enumerates connected drives
            • Enumerates system info in registry
            • Modifies registry class
            • Suspicious use of WriteProcessMemory
            PID:6076
            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff68a9f69d8,0x7ff68a9f69e8,0x7ff68a9f69f8
              6⤵
              • Executes dropped EXE
              PID:2236
            • C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\opera_package_202609240409441\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\opera_package_202609240409441\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • System Location Discovery: System Language Discovery
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:4244
              • C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\opera_package_202609240409441\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\opera_package_202609240409441\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xd9c9cc,0xd9c9d8,0xd9c9e4
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:1276
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:4376
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x260,0x264,0x268,0x23c,0x26c,0xbbc9cc,0xbbc9d8,0xbbc9e4
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:5456
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Enumerates system info in registry
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:2464
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:1452
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffad91fed30,0x7ffad91fed40,0x7ffad91fed50
                      10⤵
                      • Executes dropped EXE
                      PID:5892
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:5432
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffad91fed30,0x7ffad91fed40,0x7ffad91fed50
                      10⤵
                      • Executes dropped EXE
                      PID:5428
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2a0,0x2d0,0x1257324,0x1257330,0x125733c
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:2968
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:5616
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffad91fed30,0x7ffad91fed40,0x7ffad91fed50
                        11⤵
                        • Executes dropped EXE
                        PID:1536
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:4012
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0xcc,0x27c,0x280,0xc8,0x284,0x7ffad91fed30,0x7ffad91fed40,0x7ffad91fed50
                        11⤵
                        • Executes dropped EXE
                        PID:4864
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:3248
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffad91fed30,0x7ffad91fed40,0x7ffad91fed50
                        11⤵
                        • Executes dropped EXE
                        PID:3844
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\opera_package_202609240409441\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:2064
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffad91fed30,0x7ffad91fed40,0x7ffad91fed50
                7⤵
                • Executes dropped EXE
                PID:1896
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1676,i,9536567168164103522,4030088706365019589,262144 --field-trial-handle=1920,i,8388166275073090069,7443825947416468016,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,14694557168466627449,13099852503015684673,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1916 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:452
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2084,i,15807618593809871544,7439144129958581929,524288 --field-trial-handle=1920,i,8388166275073090069,7443825947416468016,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,14694557168466627449,13099852503015684673,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2328 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Time Discovery
                PID:3176
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2508,i,12350103082417807774,16821717697103108520,524288 --field-trial-handle=1920,i,8388166275073090069,7443825947416468016,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,14694557168466627449,13099852503015684673,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2680 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4080
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3740,i,17642328902933702201,14671000767103718144,2097152 --field-trial-handle=1920,i,8388166275073090069,7443825947416468016,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,14694557168466627449,13099852503015684673,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3984 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6256
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3976,i,14692122156280522151,8012076447378657374,524288 --field-trial-handle=1920,i,8388166275073090069,7443825947416468016,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,14694557168466627449,13099852503015684673,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4028 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6264
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4320,i,17542630086275856081,328247987011036874,2097152 --field-trial-handle=1920,i,8388166275073090069,7443825947416468016,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,14694557168466627449,13099852503015684673,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4360 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6316
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4792,i,3331215913761553025,9312386850402107848,524288 --field-trial-handle=1920,i,8388166275073090069,7443825947416468016,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,14694557168466627449,13099852503015684673,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4832 /prefetch:12
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6948
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4860,i,13768095510385136162,10617490275239975891,524288 --field-trial-handle=1920,i,8388166275073090069,7443825947416468016,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,14694557168466627449,13099852503015684673,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3540 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:7008
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1888,i,5368044552172793805,6152391788915973339,524288 --field-trial-handle=1920,i,8388166275073090069,7443825947416468016,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,14694557168466627449,13099852503015684673,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5188 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:7084
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\opera_package_202609240409441\additional_file2.tmp"
              6⤵
              • Executes dropped EXE
              • Adds Run key to start application
              • Drops file in Windows directory
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:7832
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x23c,0x240,0x27c,0x218,0x280,0x7ffad91fed30,0x7ffad91fed40,0x7ffad91fed50
                7⤵
                  PID:7848
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1624,i,2778874290619048374,13286734769455224368,262144 --field-trial-handle=1944,i,10102336247928620927,10042082680724529292,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1948,i,10983060851492620012,8025333644374209845,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1940 /prefetch:2
                  7⤵
                    PID:8032
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1896,i,16643599663952978015,9937689900614805534,524288 --field-trial-handle=1944,i,10102336247928620927,10042082680724529292,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1948,i,10983060851492620012,8025333644374209845,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1988 /prefetch:11
                    7⤵
                    • System Time Discovery
                    PID:8020
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2428,i,5553978073727270951,13839211698262896699,524288 --field-trial-handle=1944,i,10102336247928620927,10042082680724529292,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1948,i,10983060851492620012,8025333644374209845,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3108 /prefetch:13
                    7⤵
                      PID:8112
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3904,i,1950013712400906839,3636284377678477686,2097152 --field-trial-handle=1944,i,10102336247928620927,10042082680724529292,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1948,i,10983060851492620012,8025333644374209845,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=4056 /prefetch:9
                      7⤵
                      • Enumerates system info in registry
                      PID:6512
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3996,i,16990607868328131731,8817236721254606532,2097152 --field-trial-handle=1944,i,10102336247928620927,10042082680724529292,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1948,i,10983060851492620012,8025333644374209845,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4088 /prefetch:9
                      7⤵
                        PID:6248
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4100,i,16064568992220782967,726681852387864992,524288 --field-trial-handle=1944,i,10102336247928620927,10042082680724529292,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1948,i,10983060851492620012,8025333644374209845,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4352 /prefetch:14
                        7⤵
                          PID:2416
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4092,i,17167073770373546520,6853021300868630157,524288 --field-trial-handle=1944,i,10102336247928620927,10042082680724529292,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1948,i,10983060851492620012,8025333644374209845,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4712 /prefetch:12
                          7⤵
                            PID:7100
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4140,i,13247393056667842298,16032575704192215460,524288 --field-trial-handle=1944,i,10102336247928620927,10042082680724529292,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1948,i,10983060851492620012,8025333644374209845,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4908 /prefetch:14
                            7⤵
                              PID:7180
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4896,i,7113384157514866313,14624600170476861571,524288 --field-trial-handle=1944,i,10102336247928620927,10042082680724529292,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1948,i,10983060851492620012,8025333644374209845,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5156 /prefetch:14
                              7⤵
                                PID:7564
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
                              6⤵
                              • Adds Run key to start application
                              • Drops file in Windows directory
                              • Checks processor information in registry
                              • Suspicious behavior: EnumeratesProcesses
                              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                              • Suspicious use of AdjustPrivilegeToken
                              PID:7660
                              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffad91fed30,0x7ffad91fed40,0x7ffad91fed50
                                7⤵
                                  PID:6396
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1912,i,4727564590849409721,4894757191180514990,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2120 /prefetch:11
                                  7⤵
                                  • System Time Discovery
                                  • Enumerates system info in registry
                                  PID:7724
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1656,i,3285181283840098729,8790736856816388545,262144 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2084 /prefetch:2
                                  7⤵
                                  • Enumerates system info in registry
                                  PID:4884
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2484,i,3412794247763062579,8762228173010504014,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2716 /prefetch:13
                                  7⤵
                                    PID:6552
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2732,i,9095655281856121009,8121732134576925876,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3196 /prefetch:14
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:4084
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3264,i,11725337753958041338,2836862146237254104,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3348 /prefetch:14
                                    7⤵
                                      PID:7828
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3296,i,6701408307241771409,1633524692225481293,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3372 /prefetch:14
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:5944
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3228,i,14522328658974972381,11778475821394893839,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3260 /prefetch:14
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:1892
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3496,i,6276847111732669076,16195486439499970906,2097152 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3656 /prefetch:1
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:2972
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3308,i,4607827498824702052,10954393859223523797,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3392 /prefetch:14
                                      7⤵
                                        PID:1780
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3252,i,12021726227723772158,6658989464985921410,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3316 /prefetch:14
                                        7⤵
                                          PID:2044
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3320,i,11735302782462024360,2308868938775674877,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3412 /prefetch:14
                                          7⤵
                                          • Enumerates system info in registry
                                          PID:4988
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_gx_splash.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                                          7⤵
                                          • Modifies registry class
                                          • Suspicious use of AdjustPrivilegeToken
                                          PID:7396
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4804,i,10296075347291508691,6728546892094203640,2097152 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4816 /prefetch:9
                                          7⤵
                                          • Enumerates system info in registry
                                          PID:6772
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4980,i,8578843146262884316,3078289241630504335,2097152 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4992 /prefetch:1
                                          7⤵
                                            PID:6432
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5272,i,17303731520846046333,8292061512650372792,2097152 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5288 /prefetch:1
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:7220
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5416,i,13466057422017686617,16404595220050049726,2097152 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5432 /prefetch:1
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:7276
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6300,i,7081900732879811382,15585309382371391471,2097152 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6408 /prefetch:9
                                            7⤵
                                              PID:6780
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6960,i,2653372896233070586,14641434308370030762,2097152 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=7032 /prefetch:9
                                              7⤵
                                                PID:7936
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7008,i,3005961476627829120,15881646505399176466,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6632 /prefetch:12
                                                7⤵
                                                • Enumerates system info in registry
                                                PID:260
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7016,i,10239829237329831408,15921169128163528878,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6964 /prefetch:14
                                                7⤵
                                                • Enumerates system info in registry
                                                PID:7236
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7172,i,7694987583914900731,9897637109493329830,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7184 /prefetch:14
                                                7⤵
                                                • Enumerates system info in registry
                                                PID:7584
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7192,i,7656903275967688152,11049403951051967254,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7320 /prefetch:14
                                                7⤵
                                                  PID:6860
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6568,i,2200090687662243275,8165391161431121607,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7456 /prefetch:14
                                                  7⤵
                                                    PID:7640
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7464,i,9612624330815263028,13952195652385600226,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7588 /prefetch:14
                                                    7⤵
                                                      PID:7752
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7596,i,17319123316202659529,12780164448913589161,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7616 /prefetch:14
                                                      7⤵
                                                        PID:4236
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7852,i,15229640980338522593,11467387521635672573,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7864 /prefetch:14
                                                        7⤵
                                                          PID:6832
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8056,i,16735453990278476715,4744543454930875582,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8080 /prefetch:14
                                                          7⤵
                                                          • Enumerates system info in registry
                                                          PID:6696
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7900,i,17993093819590445234,795812756318825342,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8152 /prefetch:14
                                                          7⤵
                                                          • Enumerates system info in registry
                                                          PID:5160
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8084,i,11547236171295524450,4232918601750113274,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8188 /prefetch:14
                                                          7⤵
                                                            PID:7012
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8068,i,7767785292265323106,7312737221600500809,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8132 /prefetch:14
                                                            7⤵
                                                              PID:7460
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8112,i,9962358810280186404,5479170597964966573,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8264 /prefetch:14
                                                              7⤵
                                                                PID:7408
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8100,i,13003641650551008799,2552104899902049031,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8216 /prefetch:14
                                                                7⤵
                                                                • Enumerates system info in registry
                                                                PID:7440
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8120,i,15030724982554790749,16955333063871720496,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8284 /prefetch:14
                                                                7⤵
                                                                • Enumerates system info in registry
                                                                PID:7484
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=9012,i,5067367832035561210,6526756145294385642,2097152 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9076 /prefetch:1
                                                                7⤵
                                                                  PID:7396
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=9268,i,190177667793022338,8113152228451884961,2097152 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9340 /prefetch:9
                                                                  7⤵
                                                                    PID:8048
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9224,i,5257347868420272580,8113819507698655791,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9360 /prefetch:14
                                                                    7⤵
                                                                    • Enumerates system info in registry
                                                                    PID:7840
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9320,i,8387305531662895067,640229278136033774,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9380 /prefetch:14
                                                                    7⤵
                                                                    • Enumerates system info in registry
                                                                    PID:7568
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                                                    7⤵
                                                                      PID:8308
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff655e85598,0x7ff655e855a8,0x7ff655e855b8
                                                                        8⤵
                                                                          PID:7964
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9048,i,3698087801634983212,13217034287533803579,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9248 /prefetch:14
                                                                        7⤵
                                                                        • Enumerates system info in registry
                                                                        PID:8512
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10284,i,12527456004682683722,4817591560558432196,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10296 /prefetch:14
                                                                        7⤵
                                                                        • Enumerates system info in registry
                                                                        PID:6828
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9844,i,13282573751777580155,1140425566903966883,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=5732 /prefetch:14
                                                                        7⤵
                                                                        • Enumerates system info in registry
                                                                        PID:7068
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=10428,i,2262555696213545862,17516132884674809617,2097152 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=9708 /prefetch:1
                                                                        7⤵
                                                                        • Enumerates system info in registry
                                                                        PID:9140
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10724,i,265587037375467668,7018750244307043676,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10756 /prefetch:14
                                                                        7⤵
                                                                        • Enumerates system info in registry
                                                                        PID:8780
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10996,i,247837928461514796,4324565670431601946,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=11016 /prefetch:14
                                                                        7⤵
                                                                          PID:3352
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11156,i,15161956454915437631,4083749743731497739,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11168 /prefetch:14
                                                                          7⤵
                                                                          • Enumerates system info in registry
                                                                          PID:8012
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11300,i,15157009569506776186,1782964393629883664,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11312 /prefetch:14
                                                                          7⤵
                                                                            PID:6764
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8104,i,11568448695852675544,10313283338283670235,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=8368 /prefetch:14
                                                                            7⤵
                                                                              PID:8952
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7564,i,8174848761076491066,6372053460208871182,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=8348 /prefetch:14
                                                                              7⤵
                                                                              • Enumerates system info in registry
                                                                              PID:9100
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10588,i,17950191843500313121,18079891015192293986,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=8468 /prefetch:14
                                                                              7⤵
                                                                              • Enumerates system info in registry
                                                                              PID:4308
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7492,i,14860688788207459060,9399040559797050811,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=7560 /prefetch:14
                                                                              7⤵
                                                                              • Enumerates system info in registry
                                                                              PID:3292
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10576,i,11888317986276766680,7713672924264480261,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=7780 /prefetch:14
                                                                              7⤵
                                                                              • Enumerates system info in registry
                                                                              PID:6556
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7480,i,2071117090078597425,12684922354318772084,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=7768 /prefetch:14
                                                                              7⤵
                                                                              • Enumerates system info in registry
                                                                              PID:8364
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11600,i,1045724582001068909,6576721129136206388,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=11612 /prefetch:14
                                                                              7⤵
                                                                              • Enumerates system info in registry
                                                                              PID:8620
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11740,i,7147996760532764874,6068078424523582989,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=11752 /prefetch:14
                                                                              7⤵
                                                                                PID:9092
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11932,i,9247688831054740961,8351723090857391044,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=11760 /prefetch:14
                                                                                7⤵
                                                                                  PID:7336
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8796,i,8583496278751914417,16397074120769615415,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=8860 /prefetch:14
                                                                                  7⤵
                                                                                  • Enumerates system info in registry
                                                                                  PID:7512
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=8432,i,8621692035119579503,1597587053846288992,2097152 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=8460 /prefetch:9
                                                                                  7⤵
                                                                                    PID:9168
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8452,i,18091070468320053768,5982833165323927701,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=8224 /prefetch:14
                                                                                    7⤵
                                                                                    • Enumerates system info in registry
                                                                                    PID:8420
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11480,i,6611271933657156748,13519891828722424840,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=8168 /prefetch:14
                                                                                    7⤵
                                                                                      PID:8496
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6564,i,3794136364746509407,12122874856116803216,524288 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=6720 /prefetch:14
                                                                                      7⤵
                                                                                      • Enumerates system info in registry
                                                                                      PID:8096
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=11452,i,10931961959046972286,14397476525906915942,2097152 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=8884 /prefetch:9
                                                                                      7⤵
                                                                                      • Enumerates system info in registry
                                                                                      PID:6568
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=6916,i,4580012283788731127,18261487218350603674,2097152 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=11880 /prefetch:9
                                                                                      7⤵
                                                                                      • Enumerates system info in registry
                                                                                      PID:1756
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=11868,i,13997478632737330666,631351314803129381,2097152 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=7488 /prefetch:9
                                                                                      7⤵
                                                                                        PID:6200
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=7144,i,9168624393831279711,17314374768970301534,2097152 --field-trial-handle=2088,i,3898344508918539538,18048705475925224818,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,18022148637155943939,4558214583877803285,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=6876 /prefetch:9
                                                                                        7⤵
                                                                                        • Enumerates system info in registry
                                                                                        PID:8272
                                                                                • C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\opera_package_202609240409441\assistant\Assistant_136.0.6008.22_Setup.exe_sfx.exe
                                                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\opera_package_202609240409441\assistant\Assistant_136.0.6008.22_Setup.exe_sfx.exe"
                                                                                  4⤵
                                                                                  • Executes dropped EXE
                                                                                  • System Location Discovery: System Language Discovery
                                                                                  PID:5672
                                                                                • C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\opera_package_202609240409441\assistant\assistant_installer.exe
                                                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\opera_package_202609240409441\assistant\assistant_installer.exe" --version
                                                                                  4⤵
                                                                                  • Executes dropped EXE
                                                                                  • Loads dropped DLL
                                                                                  • System Location Discovery: System Language Discovery
                                                                                  • Enumerates system info in registry
                                                                                  • Suspicious use of WriteProcessMemory
                                                                                  PID:716
                                                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\opera_package_202609240409441\assistant\assistant_installer.exe
                                                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\opera_package_202609240409441\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x24c,0x250,0x254,0xe4,0x258,0xd9c9cc,0xd9c9d8,0xd9c9e4
                                                                                    5⤵
                                                                                    • Executes dropped EXE
                                                                                    • Loads dropped DLL
                                                                                    • System Location Discovery: System Language Discovery
                                                                                    PID:5800
                                                                          • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                            "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                            1⤵
                                                                            • Executes dropped EXE
                                                                            • Drops file in System32 directory
                                                                            • Drops file in Program Files directory
                                                                            • Drops file in Windows directory
                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                            PID:4100
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                            1⤵
                                                                            • Executes dropped EXE
                                                                            PID:4408
                                                                          • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
                                                                            "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
                                                                            1⤵
                                                                            • Executes dropped EXE
                                                                            PID:1600
                                                                          • \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
                                                                            "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
                                                                            1⤵
                                                                            • Executes dropped EXE
                                                                            PID:4572
                                                                          • C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe
                                                                            C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe
                                                                            1⤵
                                                                            • Executes dropped EXE
                                                                            PID:3372
                                                                          • C:\Windows\SysWow64\perfhost.exe
                                                                            C:\Windows\SysWow64\perfhost.exe
                                                                            1⤵
                                                                            • Executes dropped EXE
                                                                            PID:1092
                                                                          • C:\Windows\System32\ReFsDedupSvc.exe
                                                                            C:\Windows\System32\ReFsDedupSvc.exe
                                                                            1⤵
                                                                            • Executes dropped EXE
                                                                            • Checks processor information in registry
                                                                            • Suspicious use of AdjustPrivilegeToken
                                                                            PID:5456
                                                                          • C:\Windows\System32\SensorDataService.exe
                                                                            C:\Windows\System32\SensorDataService.exe
                                                                            1⤵
                                                                            • Executes dropped EXE
                                                                            • Drops file in System32 directory
                                                                            • Checks SCSI registry key(s)
                                                                            PID:5824
                                                                          • C:\Windows\System32\OpenSSH\ssh-agent.exe
                                                                            C:\Windows\System32\OpenSSH\ssh-agent.exe
                                                                            1⤵
                                                                            • Executes dropped EXE
                                                                            PID:3268
                                                                          • C:\Windows\system32\AgentService.exe
                                                                            C:\Windows\system32\AgentService.exe
                                                                            1⤵
                                                                            • Executes dropped EXE
                                                                            • Suspicious use of AdjustPrivilegeToken
                                                                            PID:3324
                                                                          • C:\Windows\system32\SearchIndexer.exe
                                                                            C:\Windows\system32\SearchIndexer.exe /Embedding
                                                                            1⤵
                                                                            • Executes dropped EXE
                                                                            • Enumerates connected drives
                                                                            • Suspicious use of AdjustPrivilegeToken
                                                                            • Suspicious use of WriteProcessMemory
                                                                            PID:352
                                                                            • C:\Windows\System32\SearchProtocolHost.exe
                                                                              "C:\Windows\System32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
                                                                              2⤵
                                                                              • Modifies data under HKEY_USERS
                                                                              PID:3200
                                                                            • C:\Windows\System32\SearchProtocolHost.exe
                                                                              "C:\Windows\System32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-461973139-3212354679-1508698038-10002_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-461973139-3212354679-1508698038-10002 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
                                                                              2⤵
                                                                                PID:5268
                                                                              • C:\Windows\System32\SearchFilterHost.exe
                                                                                "C:\Windows\System32\SearchFilterHost.exe" 944 2860 2856 928 {7FC3863B-7471-4B10-84E3-A5C2E0330618}
                                                                                2⤵
                                                                                • Modifies data under HKEY_USERS
                                                                                PID:5680
                                                                              • C:\Windows\System32\SearchFilterHost.exe
                                                                                "C:\Windows\System32\SearchFilterHost.exe" 944 2932 2928 928 {06DC0F6A-A3E7-4365-A8E8-F674FE2E6361}
                                                                                2⤵
                                                                                • Modifies data under HKEY_USERS
                                                                                PID:3464
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                              C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                              1⤵
                                                                              • Executes dropped EXE
                                                                              • Loads dropped DLL
                                                                              • System Location Discovery: System Language Discovery
                                                                              • Suspicious use of FindShellTrayWindow
                                                                              • Suspicious use of SendNotifyMessage
                                                                              • Suspicious use of WriteProcessMemory
                                                                              PID:4108
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                • Loads dropped DLL
                                                                                • Enumerates system info in registry
                                                                                • Suspicious use of WriteProcessMemory
                                                                                PID:5796
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                  C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffad91fed30,0x7ffad91fed40,0x7ffad91fed50
                                                                                  3⤵
                                                                                  • Executes dropped EXE
                                                                                  PID:980
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                • Loads dropped DLL
                                                                                • Suspicious use of WriteProcessMemory
                                                                                PID:4160
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                  C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffad91fed30,0x7ffad91fed40,0x7ffad91fed50
                                                                                  3⤵
                                                                                  • Executes dropped EXE
                                                                                  PID:2576
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x2a0,0x2a4,0x2a8,0x27c,0x2ac,0x1257324,0x1257330,0x125733c
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                • Loads dropped DLL
                                                                                • System Location Discovery: System Language Discovery
                                                                                • Suspicious use of WriteProcessMemory
                                                                                PID:960
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                  3⤵
                                                                                  • Executes dropped EXE
                                                                                  • Loads dropped DLL
                                                                                  • Suspicious use of WriteProcessMemory
                                                                                  PID:5876
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffad91fed30,0x7ffad91fed40,0x7ffad91fed50
                                                                                    4⤵
                                                                                    • Executes dropped EXE
                                                                                    PID:3996
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                  3⤵
                                                                                  • Executes dropped EXE
                                                                                  • Loads dropped DLL
                                                                                  • Suspicious use of WriteProcessMemory
                                                                                  PID:1220
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffad91fed30,0x7ffad91fed40,0x7ffad91fed50
                                                                                    4⤵
                                                                                    • Executes dropped EXE
                                                                                    PID:4524
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                  3⤵
                                                                                  • Executes dropped EXE
                                                                                  • Loads dropped DLL
                                                                                  • Suspicious use of WriteProcessMemory
                                                                                  PID:2932
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffad91fed30,0x7ffad91fed40,0x7ffad91fed50
                                                                                    4⤵
                                                                                    • Executes dropped EXE
                                                                                    PID:6360
                                                                            • C:\Windows\system32\wbem\unsecapp.exe
                                                                              C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                              1⤵
                                                                                PID:6308
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                                                                1⤵
                                                                                • Executes dropped EXE
                                                                                • Loads dropped DLL
                                                                                • Enumerates system info in registry
                                                                                • Suspicious use of WriteProcessMemory
                                                                                PID:2844
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                  C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffad91fed30,0x7ffad91fed40,0x7ffad91fed50
                                                                                  2⤵
                                                                                  • Executes dropped EXE
                                                                                  PID:6712
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                                                1⤵
                                                                                • Enumerates system info in registry
                                                                                PID:8316
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                  C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x294,0x298,0x29c,0x228,0x2a0,0x7ff655e85598,0x7ff655e855a8,0x7ff655e855b8
                                                                                  2⤵
                                                                                    PID:1460
                                                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                                                    2⤵
                                                                                      PID:8592

                                                                                  Network

                                                                                        MITRE ATT&CK Enterprise v16

                                                                                        Reconnaissance

                                                                                        Resource Development

                                                                                        Initial Access

                                                                                        Execution

                                                                                        Persistence

                                                                                        Boot or Logon Autostart Execution

                                                                                        1
                                                                                        T1547

                                                                                        Registry Run Keys / Startup Folder

                                                                                        1
                                                                                        T1547.001

                                                                                        Event Triggered Execution

                                                                                        1
                                                                                        T1546

                                                                                        Component Object Model Hijacking

                                                                                        1
                                                                                        T1546.015

                                                                                        Privilege Escalation

                                                                                        Boot or Logon Autostart Execution

                                                                                        1
                                                                                        T1547

                                                                                        Registry Run Keys / Startup Folder

                                                                                        1
                                                                                        T1547.001

                                                                                        Event Triggered Execution

                                                                                        1
                                                                                        T1546

                                                                                        Component Object Model Hijacking

                                                                                        1
                                                                                        T1546.015

                                                                                        Defense Evasion

                                                                                        Modify Registry

                                                                                        2
                                                                                        T1112

                                                                                        Credential Access

                                                                                        Credentials from Password Stores

                                                                                        1
                                                                                        T1555

                                                                                        Credentials from Web Browsers

                                                                                        1
                                                                                        T1555.003

                                                                                        Unsecured Credentials

                                                                                        1
                                                                                        T1552

                                                                                        Credentials In Files

                                                                                        1
                                                                                        T1552.001

                                                                                        Discovery

                                                                                        Peripheral Device Discovery

                                                                                        2
                                                                                        T1120

                                                                                        Query Registry

                                                                                        6
                                                                                        T1012

                                                                                        System Information Discovery

                                                                                        5
                                                                                        T1082

                                                                                        System Location Discovery

                                                                                        1
                                                                                        T1614

                                                                                        System Language Discovery

                                                                                        1
                                                                                        T1614.001

                                                                                        System Time Discovery

                                                                                        1
                                                                                        T1124

                                                                                        Lateral Movement

                                                                                        Collection

                                                                                        Data from Local System

                                                                                        1
                                                                                        T1005

                                                                                        Command and Control

                                                                                        Exfiltration

                                                                                        Impact

                                                                                        Replay Monitor

                                                                                        Loading Replay Monitor...

                                                                                        Downloads

                                                                                        elevation_service.exe
                                                                                        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                        • Size 2.7MB
                                                                                        • SHA256 cdc22aa8b7e787cec2071fae5acdb74d32a433ee89685e135389250b9fa6c519
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        maintenanceservice.exe
                                                                                        • Path C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
                                                                                        • Size 1.6MB
                                                                                        • SHA256 ab606c1b5f7538cc10ad90a606073d31f4f2c96679b92e2308f43f1a7de7b816
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        OSE.EXE
                                                                                        • Path C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE
                                                                                        • Size 1.6MB
                                                                                        • SHA256 6e50e9b338745a76b466599f5b80645c4fd480f34bad888732ac67233008bd8c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        elevation_service.exe
                                                                                        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                        • Size 2.8MB
                                                                                        • SHA256 e07d358abd11bd833ddf090744efc2906ea426cc978b1908f02fdb5b5f435190
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        Windows.db
                                                                                        • Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db
                                                                                        • Size 1.1MB
                                                                                        • SHA256 87b7310f44e2e030bd82be7e2f7b09308d6d1bec5afaa49eb6e68f9878520dba
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        Windows.db-wal
                                                                                        • Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db-wal
                                                                                        • Size 1.4MB
                                                                                        • SHA256 c9ffbc3e21df42fb2704594f6da74295c2a3bf094248d38679c16d6d3c4fab35
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                        • Size 471B
                                                                                        • SHA256 21a6ca94fdcb33120149ce89d82825249ebfa5e0c4312703086412b1d9b8ad92
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                        • Size 416B
                                                                                        • SHA256 e56b93e435e5a77f56e950bc2ef75f077a97e650b5b4b88bfeebd271850dd509
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        data_0
                                                                                        • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_0
                                                                                        • Size 44KB
                                                                                        • SHA256 8b4cad403715a956aab1e4816bd2c0f6eb871fd137d5c2598d966a6721537702
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        data_2
                                                                                        • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_2
                                                                                        • Size 8KB
                                                                                        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                        Submit Download

                                                                                        data_3
                                                                                        • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_3
                                                                                        • Size 8KB
                                                                                        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                        Submit Download

                                                                                        136.0.6008.22.manifest
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\136.0.6008.22.manifest
                                                                                        • Size 225B
                                                                                        • SHA256 f7cf7f8bc1e2a84858fc169d027458c9fa565afdc94ac9f58891f39667e05960
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        150x150Logo.scale-100.png
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-100.png
                                                                                        • Size 1KB
                                                                                        • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        150x150Logo.scale-100_contrast-white.png
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                        • Size 1KB
                                                                                        • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        150x150Logo.scale-140.png
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-140.png
                                                                                        • Size 1KB
                                                                                        • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        150x150Logo.scale-140_contrast-white.png
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-140_contrast-white.png
                                                                                        • Size 1KB
                                                                                        • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        150x150Logo.scale-180.png
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-180.png
                                                                                        • Size 1KB
                                                                                        • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        150x150Logo.scale-180_contrast-white.png
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-180_contrast-white.png
                                                                                        • Size 1KB
                                                                                        • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        150x150Logo.scale-80.png
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-80.png
                                                                                        • Size 827B
                                                                                        • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        150x150Logo.scale-80_contrast-white.png
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-80_contrast-white.png
                                                                                        • Size 799B
                                                                                        • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        70x70Logo.scale-100.png
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-100.png
                                                                                        • Size 781B
                                                                                        • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        70x70Logo.scale-100_contrast-white.png
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-100_contrast-white.png
                                                                                        • Size 752B
                                                                                        • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        70x70Logo.scale-140.png
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-140.png
                                                                                        • Size 991B
                                                                                        • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        70x70Logo.scale-140_contrast-white.png
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-140_contrast-white.png
                                                                                        • Size 865B
                                                                                        • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        70x70Logo.scale-180.png
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-180.png
                                                                                        • Size 1KB
                                                                                        • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        70x70Logo.scale-180_contrast-white.png
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-180_contrast-white.png
                                                                                        • Size 1KB
                                                                                        • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        70x70Logo.scale-80.png
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-80.png
                                                                                        • Size 590B
                                                                                        • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        70x70Logo.scale-80_contrast-white.png
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-80_contrast-white.png
                                                                                        • Size 519B
                                                                                        • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        assistant_package
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\assistant_package
                                                                                        • Size 3.6MB
                                                                                        • SHA256 ac451192b285e40a67ab2e34f97ff86d65ee7a1f3ce1c86f048ca1c990e11331
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        d3dcompiler_47.dll
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\d3dcompiler_47.dll
                                                                                        • Size 4.5MB
                                                                                        • SHA256 a89eedc60219e5f2d35f94573945c0a3c045cfc48270624d06ef9dae7c359257
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        dxcompiler.dll
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\dxcompiler.dll
                                                                                        • Size 24.6MB
                                                                                        • SHA256 7a553cb8cf74a12b673dd7dd9acc21bee22cbaed39b8a53fbab059f48edf1e4e
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        dxil.dll
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\dxil.dll
                                                                                        • Size 1.5MB
                                                                                        • SHA256 c7083c71cacaa9bcf0a1b686f56186cdfe41fdb1be39ab50e1c48d579870a67d
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        files_list
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\files_list
                                                                                        • Size 6KB
                                                                                        • SHA256 153ba8d7191054c8eb8b180a8f5b5b1c8dc47d0c642331beb8919a67e922e3e9
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        headless_command_resources.pak
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\headless_command_resources.pak
                                                                                        • Size 2KB
                                                                                        • SHA256 90e398ef08a0178d1efd373addb5070a551011be8b9d27fcc2f234e430a8ad98
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        icudtl.dat
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\icudtl.dat
                                                                                        • Size 10.4MB
                                                                                        • SHA256 f11071c692e85689891070cb6f68120dc1a49941325325f7e5b017af42483e72
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        installer.exe
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
                                                                                        • Size 8.0MB
                                                                                        • SHA256 3a7cd7023d780aee3c44e7502e0446807abf3f3558e1074f001e7dada324ec7a
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        installer_prefs.json
                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                                                                        • Size 1KB
                                                                                        • SHA256 252d8791291bac7c91d067f5f4a774ab7a89fab0fab0f560f5e6f48bd933f7bd
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        Opera Browser.lnk
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\opera_package_202609240409441\Opera Browser.lnk
                                                                                        • Size 1KB
                                                                                        • SHA256 2da5501abbd1423eb0894115b556e6b115d2186def0eeb4aa33b5b1db1f2ef85
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        additional_file0.tmp
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\opera_package_202609240409441\additional_file0.tmp
                                                                                        • Size 2.9MB
                                                                                        • SHA256 3f73fcad3e4341457014e2d3b6f2d8897626292ab63bcfbed20cc9156bc5059f
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        assistant_installer.exe
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\opera_package_202609240409441\assistant\assistant_installer.exe
                                                                                        • Size 2.4MB
                                                                                        • SHA256 7759a3f4d694115a391420ae1ca24edeafe6f02ee4fc2dee9937d8a4b804a608
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        dbgcore.DLL
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\opera_package_202609240409441\assistant\dbgcore.DLL
                                                                                        • Size 196KB
                                                                                        • SHA256 e7e395f28ceb05ed3519970190ec4f72a7489609acd1401fb6b41582cc1dcc3e
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        dbghelp.dll
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\opera_package_202609240409441\assistant\dbghelp.dll
                                                                                        • Size 1.8MB
                                                                                        • SHA256 27dde9b1136e5c13cc16b7cfa8945a9a9f7508ad91f124961eabed06b2886c4b
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        installer_prefs_include.json
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\opera_package_202609240409441\installer_prefs_include.json
                                                                                        • Size 224B
                                                                                        • SHA256 f799101396e58ec98238b81669c288b0649788476fdc997cd029cfd5239c8aad
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        installer_prefs_include.json
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\opera_package_202609240409441\installer_prefs_include.json
                                                                                        • Size 239B
                                                                                        • SHA256 ad0a70852936dbf15eeb5accadd7acc1554959df5b85898911e4281e402e287a
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        installer_prefs_include.json
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\50020eca-ef2f-481e-b921-dad611c0771d Opera Installer Temp\opera_package_202609240409441\installer_prefs_include.json
                                                                                        • Size 1KB
                                                                                        • SHA256 65c3e2813a48138e49e173905bddf8102aa40f583e2807cc3ab56cd716dfe0ea
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        2877ea09-03d7-42f0-bac1-8144a64877cc.tmp
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\2877ea09-03d7-42f0-bac1-8144a64877cc.tmp
                                                                                        • Size 13KB
                                                                                        • SHA256 ce8adf970c3290b7ea94c85727c5abe7eb232e16026a1f8f876ad7f3ec03573d
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        770616c9-8713-4891-af32-bcbeded22a01.tmp
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\770616c9-8713-4891-af32-bcbeded22a01.tmp
                                                                                        • Size 2.6MB
                                                                                        • SHA256 19bc35ca347a6560c0183e56da6bee3353737e78aa9eff9111c5ebd897b0cfd5
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        installer.exe
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS80D65E6A\installer.exe
                                                                                        • Size 8.0MB
                                                                                        • SHA256 7c9c1c49c414174606f75b1a24d4c5b0b1db84fa522d06e827d9d32e3d2e0e93
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        OpInst.exe
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                                                                        • Size 2.8MB
                                                                                        • SHA256 8d073333056d50b5753c6ccc75880f6cfdbcf296a279e7c5d400139f59acb838
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        bg.png
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                                                                        • Size 224KB
                                                                                        • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        favicon_opera_one.png
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2064_1395792566\CRX_INSTALL\favicon_opera_one.png
                                                                                        • Size 2KB
                                                                                        • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        Icon_Light_Neutral.png
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7660_2016092607\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                                        • Size 2KB
                                                                                        • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        manifest.json
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7660_2016092607\CRX_INSTALL\manifest.json
                                                                                        • Size 1KB
                                                                                        • SHA256 f9c5b362b8ca1fbe3598e8e225c3f7d3ac0f6f1fe050d72c7189edf541b84e80
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        rules.json
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7660_2016092607\CRX_INSTALL\rules.json
                                                                                        • Size 839B
                                                                                        • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        messages.json
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7660_207338565\CRX_INSTALL\_locales\en\messages.json
                                                                                        • Size 396B
                                                                                        • SHA256 1bcb4888a65788a50ed88f4bd95955d1dafdc950b5ef4609b37f42934a4bf3b9
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        Icon_Light_Neutral.png
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7660_207338565\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
                                                                                        • Size 962B
                                                                                        • SHA256 e8adb8a9dcca121a1853749ebef122b84a995ebf8775cd27b0dd54bab9840bd1
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        popup.js.LICENSE.txt
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7660_207338565\CRX_INSTALL\popup.js.LICENSE.txt
                                                                                        • Size 1KB
                                                                                        • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        manifest.json
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7660_42188420\CRX_INSTALL\manifest.json
                                                                                        • Size 1KB
                                                                                        • SHA256 20379f015b210e6dafac6fdc64b8faa3b2f8a66b0124f7d5d4e3a83b728802d9
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        messages.json
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7832_787336016\CRX_INSTALL\_locales\en\messages.json
                                                                                        • Size 401B
                                                                                        • SHA256 9ad8ffac49958d5bf771eb6f0bd7462b32597696c9d0a45ade771ef8c124b1bb
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        messages.json
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7832_787336016\CRX_INSTALL\_locales\en\messages.json
                                                                                        • Size 387B
                                                                                        • SHA256 554cbb0514a7897ebe50043e0de9fabfcf321dcbd3c39e77cb96e62d871c7bc3
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        messages.json
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7832_787336016\CRX_INSTALL\_locales\es\messages.json
                                                                                        • Size 424B
                                                                                        • SHA256 b04b308252b490b9555e5e002c5c6da63f3a6d517e2f659a626a500467e21100
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        preview.png
                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7832_787336016\CRX_INSTALL\wallpaper\preview.png
                                                                                        • Size 464KB
                                                                                        • SHA256 c5a2b18b255c6a4029de97ef9d00af6e563b562a2abdbee1e934ff77d5a92c29
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        settings.dat
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                                        • Size 40B
                                                                                        • SHA256 b8e273bc7c23cb0abe9d697aa265afb21468bd70240f5d8d6fffc62d5e4f875c
                                                                                        • MD5 SHA1 SHA512
                                                                                        Submit Download

                                                                                        819e130f-ec81-4efc-ada5-32c5f2b1f082.tmp
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\819e130f-ec81-4efc-ada5-32c5f2b1f082.tmp
                                                                                        • Size 456B
                                                                                        • SHA256 8f78a8ee0e46cb605360c3d35983793669548385c05edc91efbe10107c470f2c
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        BookmarkMergedSurfaceOrdering4237b5bf-5f8b-4efe-9cf5-54c67c47d88f.tmp
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarkMergedSurfaceOrdering4237b5bf-5f8b-4efe-9cf5-54c67c47d88f.tmp
                                                                                        • Size 6B
                                                                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                        • MD5 SHA1 SHA512
                                                                                        Submit Download

                                                                                        Bookmarks
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                                                                        • Size 36KB
                                                                                        • SHA256 5ddb638e645ce042a436d86e031b4da705549da7fc755c5a07b8b520c7aa41c9
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        BookmarksExtras
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                                                                                        • Size 169KB
                                                                                        • SHA256 d84d6300f67c2786c06396e2303c6d72e798e5a48d9c8ee226a246e455af7031
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        BookmarksExtras098ff048-1aa7-49d6-aef1-9092915826a0.tmp
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras098ff048-1aa7-49d6-aef1-9092915826a0.tmp
                                                                                        • Size 2B
                                                                                        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                        • MD5 SHA1 SHA512
                                                                                        Submit Download

                                                                                        52a69dac-98eb-4763-8152-6e571e86b4f1.tmp
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\52a69dac-98eb-4763-8152-6e571e86b4f1.tmp
                                                                                        • Size 48B
                                                                                        • SHA256 9dd09f3f540edf532184af13af704ec8b7b25adee664e27fc94bec8e01a1ab32
                                                                                        • MD5 SHA1 SHA512
                                                                                        Submit Download

                                                                                        the-real-index
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                        • Size 336B
                                                                                        • SHA256 dcf1911625941521f5d31e08d4b31b83efbc90d2f8b203e353922f9373587c30
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        the-real-index
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                        • Size 744B
                                                                                        • SHA256 60025db4c6ab84eb35c491ca40d341903b6d29b282a322ed74c69eab8ff30390
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        the-real-index
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                        • Size 336B
                                                                                        • SHA256 6b7180542b88b13c59e4ef0bb104c5529abc33c115817e82ba91f4ec4b17c54c
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        CURRENT
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\CURRENT
                                                                                        • Size 16B
                                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                        • MD5 SHA1 SHA512
                                                                                        Submit Download

                                                                                        MANIFEST-000001
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Scripts\MANIFEST-000001
                                                                                        • Size 41B
                                                                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                        • MD5 SHA1 SHA512
                                                                                        Submit Download

                                                                                        main.js
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.8_0\main.js
                                                                                        • Size 47KB
                                                                                        • SHA256 9cc5e1dd96d76735499257c52d632a0a9e17ed4da929035067dadcc586000335
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        manifest.json
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.8_0\manifest.json
                                                                                        • Size 1KB
                                                                                        • SHA256 a34bc0307423ba5a3fbba7762f1425e4ab37f9155954b282a3e6b5e3b9335d87
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        computed_hashes.json
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.8_1\_metadata\computed_hashes.json
                                                                                        • Size 647B
                                                                                        • SHA256 33292b4957ad26bd5d1fd5f1fb1c6a7d8ed1830cca27b21ef1c6be161bd7c2c0
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        verified_contents.json
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.8_1\_metadata\verified_contents.json
                                                                                        • Size 1KB
                                                                                        • SHA256 bcd4d6b1fab1648490bfcd3fbc8d25d438172e9d7a7836f806cf61b2a38d1736
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        logo_128.png
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_128.png
                                                                                        • Size 7KB
                                                                                        • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        logo_16.png
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_16.png
                                                                                        • Size 653B
                                                                                        • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        logo_32.png
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_32.png
                                                                                        • Size 1KB
                                                                                        • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        logo_48.png
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_48.png
                                                                                        • Size 2KB
                                                                                        • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        logo_64.png
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_64.png
                                                                                        • Size 2KB
                                                                                        • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        service-worker-loader.js
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\service-worker-loader.js
                                                                                        • Size 49B
                                                                                        • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                                                        • MD5 SHA1 SHA512
                                                                                        Submit Download

                                                                                        favicon_opera_one.png
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\favicon_opera_one.png
                                                                                        • Size 2KB
                                                                                        • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        reader_mode.js
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\reader_mode.js
                                                                                        • Size 112KB
                                                                                        • SHA256 17f8a5c1d70acee668cc6964317d88802d4409c32b0d7e292b95e1de8ddb16df
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        spotify_frame_interceptor.js
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\spotify_frame_interceptor.js
                                                                                        • Size 5KB
                                                                                        • SHA256 895ef6ae0efde6f5e8af23d1acbfac4a5351bda31c89d2e64c05f2de0181dd56
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        background.js
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\background.js
                                                                                        • Size 87KB
                                                                                        • SHA256 b199d4f989c63947c53a9d07450038cfe274b7a10e8cc7d688c4049ae14ef63e
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        Icon_Dark_Active.png
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Dark_Active.png
                                                                                        • Size 2KB
                                                                                        • SHA256 97d9553a4f725354a6d5c3eff11f31285fd89c3b150593f04785b83d0a56efc2
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        Icon_Dark_Available_Red.png
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Dark_Available_Red.png
                                                                                        • Size 2KB
                                                                                        • SHA256 9eccebdbdb61efc0cbd8bccf3a5fedc6f9a1ebe5084b160783f90a56cd1efa7b
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        Icon_Dark_Available_Yellow.png
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Dark_Available_Yellow.png
                                                                                        • Size 2KB
                                                                                        • SHA256 c165ef60bf3806cd0a7121a8d6cfd06909fc84b38a07d43e809bd7bff564099c
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        Icon_Light_Neutral.png
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Neutral.png
                                                                                        • Size 2KB
                                                                                        • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        Icon_Dark_Active.png
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Dark_Active.png
                                                                                        • Size 883B
                                                                                        • SHA256 50aa1dcfa9083b57dd6187752b2c149294210be12d263b793d27daf8d431954c
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        Icon_Dark_Available_Red.png
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Dark_Available_Red.png
                                                                                        • Size 895B
                                                                                        • SHA256 2278e95b28851ade57217ab5c7b32598c44e1085693a3e26379643d29fa0a6d1
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        Icon_Dark_Available_Yellow.png
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Dark_Available_Yellow.png
                                                                                        • Size 895B
                                                                                        • SHA256 726a50a9c008449ab7bafbf21325bfc72093b7ae6a56c5be90cf8c32a8a44641
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        index.html
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\index.html
                                                                                        • Size 222B
                                                                                        • SHA256 fd21c7ca4637b0221250a14b9fcfb6ebc3b734e659ad80151be4bc579db818f1
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        manifest.json
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\manifest.json
                                                                                        • Size 1KB
                                                                                        • SHA256 fa9f0ac01359d1b3776f60327011a291abff71cfb5b15840ef5382c4a4a0990c
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        messages.json
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_1\_locales\en\messages.json
                                                                                        • Size 429B
                                                                                        • SHA256 c6a7161359e3c4fbc4059b7209c585f9aa2306c08e6c39a3003f4b29f2ceb22d
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        computed_hashes.json
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_1\_metadata\computed_hashes.json
                                                                                        • Size 73KB
                                                                                        • SHA256 9cc4f371fb6b65d343bb5cb54028255291e0e10b4e79a540321bfcc973b2b395
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        verified_contents.json
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_1\_metadata\verified_contents.json
                                                                                        • Size 6KB
                                                                                        • SHA256 1bf53733d8e832f02e1f77027519064e25326b3e76496809acb1745ebe29688e
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        Icon_Light_Neutral.png
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_1\icons\32\Icon_Light_Neutral.png
                                                                                        • Size 932B
                                                                                        • SHA256 b8e92f9e9b9dc82799231b8d1b57091a9d0bcdd9b54615f86e8c4e4e5c9f036b
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        08978f4c-064c-4968-ab8e-a60b56c245c3.tmp
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\08978f4c-064c-4968-ab8e-a60b56c245c3.tmp
                                                                                        • Size 27KB
                                                                                        • SHA256 7aca076b4b1dccb2457284a51bddb5c43eacf93224ec1f9aedcdefb1fbc9b087
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        1c06c687-1ee4-43b5-975b-f23b9b007db2.tmp
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\1c06c687-1ee4-43b5-975b-f23b9b007db2.tmp
                                                                                        • Size 27KB
                                                                                        • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        273d10ff-c795-4e03-af9c-febb95e3ab7a.tmp
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\273d10ff-c795-4e03-af9c-febb95e3ab7a.tmp
                                                                                        • Size 27KB
                                                                                        • SHA256 3a9c655a88437e331f50a23bb40cb1a3de86277cb1a9488c81c426598cfab0a3
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        53135040-8d6a-40ec-8d1d-aaf26074effe.tmp
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\53135040-8d6a-40ec-8d1d-aaf26074effe.tmp
                                                                                        • Size 27KB
                                                                                        • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        abf25230-51ff-4592-9020-e04ccfc2c328.tmp
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\abf25230-51ff-4592-9020-e04ccfc2c328.tmp
                                                                                        • Size 27KB
                                                                                        • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        fa57cddd-186a-40e9-ac21-90f2c6c1ab21.tmp
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\fa57cddd-186a-40e9-ac21-90f2c6c1ab21.tmp
                                                                                        • Size 27KB
                                                                                        • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        Network Persistent State
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                                        • Size 1KB
                                                                                        • SHA256 8fb413988833368898e521db176cf36f41173de694437cf5d375f0da3c40d859
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        Network Persistent State
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                                        • Size 61B
                                                                                        • SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        Network Persistent State97eb7fb9-cb8c-4d99-beb8-745c7dee982f.tmp
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State97eb7fb9-cb8c-4d99-beb8-745c7dee982f.tmp
                                                                                        • Size 111B
                                                                                        • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        SCT Auditing Pending Reports6bf4c10e-f26a-47c7-a31c-4a4b43fe7979.tmp
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\SCT Auditing Pending Reports6bf4c10e-f26a-47c7-a31c-4a4b43fe7979.tmp
                                                                                        • Size 2B
                                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                        • MD5 SHA1 SHA512
                                                                                        Submit Download

                                                                                        Preferences
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                        • Size 16KB
                                                                                        • SHA256 335e7978e6f9a07630b6bca41effe834711d41c4dd1c546d2990723b5315c0ae
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        Preferences
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                        • Size 11KB
                                                                                        • SHA256 901a6118f10b732cefe8591afeac666e82635266264ddb7465cd5da20fa7cbda
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        Preferences
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                        • Size 15KB
                                                                                        • SHA256 176346f439e371b0f1c200d5a68e861512395f85a6c387b526112c9f85db2b39
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        Preferences
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                        • Size 15KB
                                                                                        • SHA256 eb51e99a82caf9658a43ad6834dee1ec7075c26387d230043fe4f224d27ee473
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        Preferencesaa599037-9f75-4966-b66a-09509f05f25f.tmp
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferencesaa599037-9f75-4966-b66a-09509f05f25f.tmp
                                                                                        • Size 10KB
                                                                                        • SHA256 066684b02f01e02f279971227ddae7536ceb8c5281d82fb833a9321aac5415ca
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        Secure Preferences
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                        • Size 85KB
                                                                                        • SHA256 db1f36720fb67c61dbed846a1a1b6526245ed28b911364de234be763da3f4c86
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        Secure Preferences
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                        • Size 85KB
                                                                                        • SHA256 11536adab2963978d5b8705a9a6d1b1c3a5b033c7ea75caf13743830a3275640
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        Secure Preferences
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                        • Size 115KB
                                                                                        • SHA256 9e2e7b4f8c77e40880c155acf4858d5f2f3f703df9b3f9e4dbe603b504574893
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        d08a0f36-99a2-4497-bd25-8c2a09f94216.tmp
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\d08a0f36-99a2-4497-bd25-8c2a09f94216.tmp
                                                                                        • Size 72B
                                                                                        • SHA256 cac17387ee5248d0472d357251059579c8044c35283610f0ea28b563a57bd72a
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        temp-index
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                                        • Size 360B
                                                                                        • SHA256 04748fd795de08824b3b42c2575ad2943fcd627c398b0499794400a3fbda91d3
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        the-real-index
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                        • Size 360B
                                                                                        • SHA256 c1eb73da957978f7a4358952782bc6e042236714970f502ee5a5c1977196fa00
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        the-real-index
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                        • Size 120B
                                                                                        • SHA256 c1e6742b09dc21bacef764d6ebc82b53c8228e1f13857cf3312deea2e4f0e99a
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        the-real-index
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                        • Size 216B
                                                                                        • SHA256 874233e764566428433e29226e269d99f594c08ccc2233e7bddbd52649f37cd7
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        339a8216-e5a9-47bc-9cb9-5b956a3843cd.tmp
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\339a8216-e5a9-47bc-9cb9-5b956a3843cd.tmp
                                                                                        • Size 381B
                                                                                        • SHA256 cc9cf3e2c2d62bf23b0d2b6b6ba50fb66f52c6c774195baa5db41b22022209a0
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        a2363afb-ed89-4a36-a59e-ab5ffa25fc1e.tmp
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\a2363afb-ed89-4a36-a59e-ab5ffa25fc1e.tmp
                                                                                        • Size 381B
                                                                                        • SHA256 a1e80b29beacabe7c67e332be1fe9152c1b9710654fb7fce064df6180127d301
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        c72cec4f-5497-4b2d-ba04-44c71a46acc8.tmp
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\c72cec4f-5497-4b2d-ba04-44c71a46acc8.tmp
                                                                                        • Size 381B
                                                                                        • SHA256 e3260efe4c426a979ba03cd7554d6249094f6730289a78602e6b66a1b5eb1b41
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 8KB
                                                                                        • SHA256 e9a2ea44c37bafe9a072bab5e12d46b2d942a60824adb13555b1ea4a408b8491
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 060e9b3ff89e91ac51707e76301eba183758f189cdc197b76c3b6c114948582c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 8fc188a2cf4fd96ba6e7a2b837929047cacc101f7ed6e15fabca219c5d99f8a2
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 2376e1979f0d3152c394bc9247ca1b91b1fcda70f75f1c71a3211905ed452503
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 8dd8c328ad6202d2b6004f3de699fc892a987e3f7b737876eace9d5dcdc79870
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 7KB
                                                                                        • SHA256 84045b04145315ac48d668b5dc4b4d28c113e249a7bec3b3bcd11d8ad2d60fa1
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 7KB
                                                                                        • SHA256 f31a27c95bbad0918154075f3b04b56d335ccbbf23fc0092587cf5aaa971053b
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 8KB
                                                                                        • SHA256 e9de6b709716d282f18c5eaad90231e9dec24a0504c6c7ab3b4945dd1e751304
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 bf7ff3c155d67c85fb6f59b2b599a17dfa5862a3dbe5fa40ba12d0d9a414978c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 f52e66afaebb4fa001500686a2208fbef5a046c55414f5f9f75fb22c3be61e12
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 a09cd33b0cff420159e1504e6212d9079c7400e298085ec0afaf6b84055f409a
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 8b8c3a6678ba6d3392a34f136734676e11fb3963739046cffee02716f47f0fdd
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 dd6ea4af5040cfc7ed4f48db611d450ed2b76d07c1ae036337838110d59108c1
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 7b5048ec716dadd0936b9a9662c2d50d4f42acb07ef524027a5cee5ca9d1b66c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 752957d7895740ab39858ac43e2d8a375fd31c39beff6154d05e463fb54af63a
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 a39129cb40698494ff2142872ff1e69bf940067f2fed6199e55379fe7dcbd880
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 ea90978fe5c405390625b3cc946e0224f17f6f4c1fba13549656e3cbf6abcb58
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 3ee40b5bfcc77e460704e221ea3adeb202bb88d7558691fad27e7935bb774c51
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 f3b79b460d944e0a7e8e08c693b2890cd9e038321687ac7caefcdfffeb2b4338
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 89902612ff537a88c694752560b91aece7610822c058c2dca779de523f6920b1
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 c89448973ef6960255e8485822ab0c106e8788ee4aa3de631ddc0e9123970921
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 8KB
                                                                                        • SHA256 f238c132d55b6782bad15f9697dc618ba96b90867a5f0f592165f3bd7a5ef2f3
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 7KB
                                                                                        • SHA256 a21a038faab44ec5a4d5156f67c6a5effb14b9cc17be3303fdfe73e5f0952852
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 7d851d40d1ea100617f7803da4a5d295d523e1bdd6f79686a41444a674c077cb
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 4334d279c05309a8114db2fa50238608d0c7ce5cf8a98a129512e4c4b68087ea
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 f8b9abcde73ed70ea86a933860c74d1a333bf82d56f17e2ab2eff21d3234ca55
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 11KB
                                                                                        • SHA256 766d29fc77d003f0dbc6911ac2e020d78966e32d393584afd957aa14fb7931c6
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 11KB
                                                                                        • SHA256 8435c965048bf55536be64bb6744b1c8bcead97d57e7c479627424fec4e62c13
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 11KB
                                                                                        • SHA256 305541601010e6d6874e33da89e22c2b9d1bf0caedd3ec620dae303246d59cda
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 493B
                                                                                        • SHA256 92be19941f7944142bcda8dba800985d859752c99d1fbb5b32899644fc68f74d
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 e6cfedd0df8eceec7c9552dbda47f7d0a38d9aaf0f7b98fd903f42ea7d00bec5
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 7798bb27d16e45882b60c94bcb942741f5f88179f36ac403933ce974c1b53d67
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 9b3f282b93f4ab7d1a15e1b436bea5f5583775150366d08aba523ce73be06eed
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 068eb2e275fe57a75fcdc504599706f6a470fa51378df7b3960e5848ff2fd7c6
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 6KB
                                                                                        • SHA256 e58e53d2af97c6123adc291f84c2f07b2017f4db1b4278d8597a7e9ab6ddf690
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 af7bf357e49e0c1161abf904047a094f5be7a45269d3d5b3a7be688171f40996
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 67c45c546917a941c094ff9e6bf33fbb3ce7589e301702c5dd2bdecf85226e72
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 44b2cc30f16bdd442f85ce8cfa7aa25f9a7b2153ca09b5eb7388ae7a6c81353a
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 b2ed7c5a96ea2cfe7e5adcb32a1332ec6c8aa1b97405106a53aa5c3138d574f9
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 849561a2f4faec316541e5f1fecc31ff2ec8fa24b7fa2e0f2398582bd43ceaa5
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 d9a2c9c2e7611a8e4aed3cbeb45f7a37c946827793bf3121c911eb63d70f72a1
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 11KB
                                                                                        • SHA256 df5089c9396df3eb6f307f5e8bc9ab35b9b697381ba200adf67fbee775bdeebe
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 11KB
                                                                                        • SHA256 7f9f89e8c26b915440a7697332c00df6bcc1b1cb7d0be49aa423aa33dd515e16
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 8KB
                                                                                        • SHA256 4928b1dafc30b0040775bc68ed85a7c9a8c4cb6ef975174dbbd2aa89d3da916c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 358d73bb745f2f8217fc4a4b569f50cac4af91df43a29b388226525e6b551864
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 6c40d5862e0340fa82398aa8b41ac08a9d723d0aa09233964923263669379fd1
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 3ff4876ebc52769a51b55631427cff5f838c48ddaac0b200acd7040744d24261
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 c1b041165a856a8799902a6ee47761893c770affd77dcbf327addafa441a8d23
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 11KB
                                                                                        • SHA256 b3c17a90daa4579e9ae23ec9084ecbdc253457975bee6ac18b4703b6e0ea7c74
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 8KB
                                                                                        • SHA256 9432d880487f916bb638b75532b613b09ab2ea7c73a2bb9b68c524b2eb41fca9
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 df8a06308fbfb7de2986ff101a6205f8e27a880685d345766239f360ee007c96
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 733B
                                                                                        • SHA256 cfa4223b6631ad1b8f98305d9823358ede6eb90e0c6fad7f4e887bb290dc91a4
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 ba4c85cc51a3b83c0692f4afd6dec39855df1b9d59f026f6fa0d8f125753c036
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 8KB
                                                                                        • SHA256 f9a783b8f6a131fc15590df144a827bf369b9b93463f00da714bcc549314ab99
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 f942fd08b3bbd39d1698e5f94ce3aa5fc5087d6d372bda6f1eeed820d1036ee0
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 621B
                                                                                        • SHA256 f20948a482777fcd66ac998e291cddaf5a1f0dd7d529d527c69484171eedb882
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 925B
                                                                                        • SHA256 e0b463398a2f9e9c53063ee2f3e5e32cf8d5e65292be01f0ffb41167f0418d02
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 8KB
                                                                                        • SHA256 49067f2075c581e34101a4746bd03448d157986658f569e6509a88990785cf8c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 11KB
                                                                                        • SHA256 7f729f9065c8ad36ab7bf46486f46d5f49175d3128428506d8511f79cdc6aaba
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 6b1f1172ed38b1d02842201b7309d43e030c60bc9dd1c7438230172024628088
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 8KB
                                                                                        • SHA256 d351b873fd5066f21ff75520ea21cbdc38eb1246148f2f1dbd93169e8c9e54f3
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw
                                                                                        • Size 973B
                                                                                        • SHA256 e6030178b2758e8f5bf0f99df0454cb7acf0dbafa52fc825f3f098c33c6c5ecf
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw1b4aa2db-367c-4cd8-865f-613e711bd897.tmp
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6e78f980-9979-4d1a-ad7f-8249ad7f2851.raw1b4aa2db-367c-4cd8-865f-613e711bd897.tmp
                                                                                        • Size 11KB
                                                                                        • SHA256 3092b3f46c027ce85f9992e34e0f727db53dad37ee951dca08dab2b90a59b23a
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        session_d4ff1e01-3d8b-4692-bffa-4b4a96f3dc02.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_d4ff1e01-3d8b-4692-bffa-4b4a96f3dc02.raw
                                                                                        • Size 621B
                                                                                        • SHA256 023ccbcee3e1375e6604fa25703eb680a15ffec77645cbb2ed9d7cae6ce67cd0
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_d4ff1e01-3d8b-4692-bffa-4b4a96f3dc02.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_d4ff1e01-3d8b-4692-bffa-4b4a96f3dc02.raw
                                                                                        • Size 637B
                                                                                        • SHA256 fc34f15b229b1051a958673d89cc6ffe2bd39951fa793b0331834db6ff5ef3d7
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_d4ff1e01-3d8b-4692-bffa-4b4a96f3dc02.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_d4ff1e01-3d8b-4692-bffa-4b4a96f3dc02.raw
                                                                                        • Size 637B
                                                                                        • SHA256 e111a5f39fc0a13b9660990c56538337a280303cecb923047fbc57309e865021
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_d4ff1e01-3d8b-4692-bffa-4b4a96f3dc02.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_d4ff1e01-3d8b-4692-bffa-4b4a96f3dc02.raw
                                                                                        • Size 637B
                                                                                        • SHA256 7bb7208cf771d2a66183e36a9a2baa3254557e881ace6a621feb8722c9594400
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_d4ff1e01-3d8b-4692-bffa-4b4a96f3dc02.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_d4ff1e01-3d8b-4692-bffa-4b4a96f3dc02.raw
                                                                                        • Size 845B
                                                                                        • SHA256 286be0da0bd492de6083055be32883b92c03597cb9b64209cfe24828feb945ae
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_d4ff1e01-3d8b-4692-bffa-4b4a96f3dc02.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_d4ff1e01-3d8b-4692-bffa-4b4a96f3dc02.raw
                                                                                        • Size 797B
                                                                                        • SHA256 ca001f8f6df4c0678bb8cb687fc9d19dc299054acf676a4ef2c259fe473b2158
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_d4ff1e01-3d8b-4692-bffa-4b4a96f3dc02.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_d4ff1e01-3d8b-4692-bffa-4b4a96f3dc02.raw
                                                                                        • Size 493B
                                                                                        • SHA256 8d980da6772baa958ac4e3a1ccd725ae0330c72107458b0b505ad0b54b5f71f7
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_e78a7d54-b24b-4062-a6c3-1e0b771bea3a.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_e78a7d54-b24b-4062-a6c3-1e0b771bea3a.raw
                                                                                        • Size 605B
                                                                                        • SHA256 9009856f92924fff3f5e3eb4308e087906724852e42c348475426e8298485c2e
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_e78a7d54-b24b-4062-a6c3-1e0b771bea3a.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_e78a7d54-b24b-4062-a6c3-1e0b771bea3a.raw
                                                                                        • Size 941B
                                                                                        • SHA256 0f872177518ed5040f8411238e6425a9c6c96e91d8220301aaf612cbaa179b34
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_e78a7d54-b24b-4062-a6c3-1e0b771bea3a.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_e78a7d54-b24b-4062-a6c3-1e0b771bea3a.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 c514bc04557650a4fc72b4bb1f7a32d9acf85161d753acb161963862cc6caf79
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_e78a7d54-b24b-4062-a6c3-1e0b771bea3a.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_e78a7d54-b24b-4062-a6c3-1e0b771bea3a.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 f7bfd99639c9f709fc3c6706c35fd4c51872810ddf65428884c9b2520debb38f
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_e78a7d54-b24b-4062-a6c3-1e0b771bea3a.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_e78a7d54-b24b-4062-a6c3-1e0b771bea3a.raw
                                                                                        • Size 493B
                                                                                        • SHA256 7ea3544cea41f79769c2adb0530624af576502d5a5c6172a3d6150934ab07ee7
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_e78a7d54-b24b-4062-a6c3-1e0b771bea3a.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_e78a7d54-b24b-4062-a6c3-1e0b771bea3a.raw
                                                                                        • Size 765B
                                                                                        • SHA256 7248fdb0eca5b2d8997b5a1403842b8a8e7d03eb513884a7f9a1fb46b591d531
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_e78a7d54-b24b-4062-a6c3-1e0b771bea3a.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_e78a7d54-b24b-4062-a6c3-1e0b771bea3a.raw
                                                                                        • Size 957B
                                                                                        • SHA256 d141db3dbed95b652b834425151603ed1af54d99b81bafeff9cd08f8c8541a94
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_e78a7d54-b24b-4062-a6c3-1e0b771bea3a.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_e78a7d54-b24b-4062-a6c3-1e0b771bea3a.raw
                                                                                        • Size 957B
                                                                                        • SHA256 1170e68cfe91b30b98819f041b8632ba2b633bb48ffc67411aef3554dd40adbe
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_e78a7d54-b24b-4062-a6c3-1e0b771bea3a.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_e78a7d54-b24b-4062-a6c3-1e0b771bea3a.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 f8f696e05c4b01c29d1fd5cd58b6c1ab01a84de581a01866c86843de6a93987b
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_e78a7d54-b24b-4062-a6c3-1e0b771bea3a.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_e78a7d54-b24b-4062-a6c3-1e0b771bea3a.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 f1d06ebbcb21d7368cb7abb0fc57d9e7b5d580dba4ae114f1f437b0c29c8840c
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        session_e78a7d54-b24b-4062-a6c3-1e0b771bea3a.raw
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_e78a7d54-b24b-4062-a6c3-1e0b771bea3a.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 81957761a1ba7a2421c5204ecff5ed45ebd3101867a50e4fbd9dc5a012d110af
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        c1d37393-6296-456c-a434-694afd58b33a.tmp
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\c1d37393-6296-456c-a434-694afd58b33a.tmp
                                                                                        • Size 203B
                                                                                        • SHA256 a0a37b5fb67712adaf79f3eb1635abc41d0612c322305984ed6128dc3c1f8a5c
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        d6d2052f-fce3-4c8e-b9f2-7e708411e6d1.tmp
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\d6d2052f-fce3-4c8e-b9f2-7e708411e6d1.tmp
                                                                                        • Size 203B
                                                                                        • SHA256 1e8b9ead477ea52cbf7163995974d4d3571089dd128816226e5b414fd5be0b15
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ee81149c-d467-4d9e-9cce-1e4b577ec7e9.tmp
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ee81149c-d467-4d9e-9cce-1e4b577ec7e9.tmp
                                                                                        • Size 171B
                                                                                        • SHA256 d75adad772dac7b608c726bd677d8609b08b925448ea83beb9ad337c7c83c06b
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp2064.0.1235663308
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2064.0.1235663308
                                                                                        • Size 265B
                                                                                        • SHA256 6b8a44349daff327c61750a42c343ccd6bc185dea8c9e1e31da9046b52f95616
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp2064.0.1235663308
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2064.0.1235663308
                                                                                        • Size 2KB
                                                                                        • SHA256 e37ffb519cb0646a1ba7a7c1eeaabf4b167a6b4c0b57a583de52bb3fe96cd958
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp2064.0.1235663308
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2064.0.1235663308
                                                                                        • Size 1KB
                                                                                        • SHA256 737b200012dc2d98ae22090fff0deb059f95cdf8353c73fc853861cf91fbf0f4
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.0.902011178
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.0.902011178
                                                                                        • Size 1KB
                                                                                        • SHA256 545855cd5c32423320cd1000d54e5cd512d592a802f0cb2185c9144f35c5c6c9
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.0.902011178
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.0.902011178
                                                                                        • Size 1KB
                                                                                        • SHA256 593fb8460edc97565d635367bf6c08bb520173dc3dc32a35b6412e3899f1d32c
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.0.902011178
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.0.902011178
                                                                                        • Size 1KB
                                                                                        • SHA256 681c9029b46bf597f001b46ebec7057db89850e27a0b626672ec54b06d4cb0cc
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.0.902011178
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.0.902011178
                                                                                        • Size 1017B
                                                                                        • SHA256 0c4d4b44be1afc098718d01af865b7e7f2cd57b49ca9522a31fe2977479e0499
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.0.902011178
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.0.902011178
                                                                                        • Size 1KB
                                                                                        • SHA256 908f18881afa71f2912915440b653c8dbd46cae756ab52ab2e8545313b374deb
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.0.902011178
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.0.902011178
                                                                                        • Size 1KB
                                                                                        • SHA256 9740e0c586e848c54527a9f906818fe191076774912c23659cabadf3438af330
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.0.902011178
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.0.902011178
                                                                                        • Size 1KB
                                                                                        • SHA256 c7fba8ab38b7b9d4942734a8a1ee65ed0fec9bc105710383f8cbbc9042176c32
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.0.902011178
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.0.902011178
                                                                                        • Size 1KB
                                                                                        • SHA256 1c6f86652e890b5ab8d346de82b433c42419cdf8f83cd0472bcea2d779013071
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.0.902011178
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.0.902011178
                                                                                        • Size 2KB
                                                                                        • SHA256 652adaca812fe57debb36cfb8fa652199e3ada55fd6e249132ae009f747c1e4c
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.0.902011178
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.0.902011178
                                                                                        • Size 3KB
                                                                                        • SHA256 c920cfc789eb18ca54c180ddd24bc5cde48b77e3956051d0aa35baa46c3cad08
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.0.902011178
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.0.902011178
                                                                                        • Size 3KB
                                                                                        • SHA256 7fd58cf683e10a6d6666b545d42799f514f8523c929ceb4ea5620170fa679e5e
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.0.902011178
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.0.902011178
                                                                                        • Size 3KB
                                                                                        • SHA256 53a7190a903c4cf64f91df2592504a2e12a0df4a03cab69cfd5975c1d02cbfcc
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.0.902011178
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.0.902011178
                                                                                        • Size 3KB
                                                                                        • SHA256 978c4f287668f1c331ebb30c2fd85d8d9e8d4d85edebe8fe495f9396effa82ca
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.0.902011178
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.0.902011178
                                                                                        • Size 3KB
                                                                                        • SHA256 f9f7529390de3e87e99004db8015c60dfac027d9b6ec9535322525d6b46a958a
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.0.902011178
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.0.902011178
                                                                                        • Size 3KB
                                                                                        • SHA256 b5d864fa058d5226e4c2421c64f94fcc13dd651dd17f66528aba529792868c18
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.0.902011178
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.0.902011178
                                                                                        • Size 4KB
                                                                                        • SHA256 4ae86cda534e601ba28a842a311d70d1e3e56519e85db35928323866ce581f9d
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.0.902011178
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.0.902011178
                                                                                        • Size 921B
                                                                                        • SHA256 3ceaeaaca87210b24537b7084e6d4f0452138d726eefb9711718f8411e8ea7bd
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.0.902011178
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.0.902011178
                                                                                        • Size 3KB
                                                                                        • SHA256 160d12a1fe803b477af1dbab8f10b597dd76408ec8a8c95220bafe0b2f774216
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.0.902011178
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.0.902011178
                                                                                        • Size 737B
                                                                                        • SHA256 4481a9eb1c509f9f4885828e4e412ef94444fda35b4870b37638fdb691988d0a
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.0.902011178
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.0.902011178
                                                                                        • Size 647B
                                                                                        • SHA256 839b4c2182c5bec314a39f9fdb61be34c3da0a5c08e52cfd1f236f7f9de0ed8a
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.0.902011178
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.0.902011178
                                                                                        • Size 827B
                                                                                        • SHA256 d59d2fa51911e2027db307cb1db4864a4fbea93befe90629c7b5271665397ef2
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.0.902011178
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.0.902011178
                                                                                        • Size 549B
                                                                                        • SHA256 b9500500489eaa43378882499f7b4811b2b8d3ecee8796467e345c07188c017e
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.1.1606712243
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.1.1606712243
                                                                                        • Size 224B
                                                                                        • SHA256 222e4137ca0489165aeb8261b024f94e27c8b116546aa513c314a330c9f60797
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.1.1606712243
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.1.1606712243
                                                                                        • Size 200B
                                                                                        • SHA256 63dc3977117a29e73b695b574646e9c1e71717ec9b4f1ff659560ecbb52a8bb6
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7660.1.1606712243
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7660.1.1606712243
                                                                                        • Size 224B
                                                                                        • SHA256 1529b51a5c3d7fed44b88ab83e8df0bcca737f1c2879bf0fa17f155d20d41102
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7832.0.727741530
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7832.0.727741530
                                                                                        • Size 265B
                                                                                        • SHA256 713141c7e1598f7b4a90197d9555eaa6055c4e7c5f2919f1cd4d4da3de7c7dae
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7832.0.727741530
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7832.0.727741530
                                                                                        • Size 2KB
                                                                                        • SHA256 a3f77dbef67926d0db53e535e139de5a4d61ba9059089f8508eb4a5d222ae51a
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        ssdfp7832.0.727741530
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7832.0.727741530
                                                                                        • Size 1KB
                                                                                        • SHA256 98e859d50dfb72c9c54aec908e9bdaaa0257d4abd4c15673461de3d01e4776cb
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        suggestions_cache.json243ea559-77b8-4dc3-8945-8d4b2782a5cb.tmp
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.json243ea559-77b8-4dc3-8945-8d4b2782a5cb.tmp
                                                                                        • Size 652KB
                                                                                        • SHA256 43ae0c2b17ce279868427cb3068374c0447c88ecb473e2fbe99159807751f773
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        data_0
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_0
                                                                                        • Size 8KB
                                                                                        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                        Submit Download

                                                                                        data_1
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
                                                                                        • Size 264KB
                                                                                        • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                        Submit Download

                                                                                        Local State
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                        • Size 2KB
                                                                                        • SHA256 5394c2023931c7d86f0d139aaaf60209d9b9505df22dc59d62261f2a6d79c2e8
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        Local State
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                        • Size 4KB
                                                                                        • SHA256 7ff7f09a29de60b666fe6152bb45d88b020e439f63557bad073e03aa217c956d
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        Local State
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                        • Size 3KB
                                                                                        • SHA256 82ef9df6a19e2c826e88e1ed149baccca5088ab7364b6e8343d808d49a6d4bf3
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        VariationsSeedV2
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                                        • Size 19B
                                                                                        • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                                                        • MD5 SHA1 SHA512
                                                                                        Submit Download

                                                                                        VariationsSeedV2
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                                        • Size 11B
                                                                                        • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                                                        • MD5 SHA1 SHA512
                                                                                        Submit Download

                                                                                        assistant_prefs.json
                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
                                                                                        • Size 151B
                                                                                        • SHA256 b9e3a7ea1bfcc86896c63a6dcca117dfe5512377e741c78e265c2497bf2441e1
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        perfhost.exe
                                                                                        • Path C:\Windows\SysWOW64\perfhost.exe
                                                                                        • Size 1.4MB
                                                                                        • SHA256 720c85f6c3cd52c0404e9e07f5f14a2b6cadf8d5bbf85c9036e7113f3117779f
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        AgentService.exe
                                                                                        • Path C:\Windows\System32\AgentService.exe
                                                                                        • Size 1.4MB
                                                                                        • SHA256 c5c1969a22cb102607593c6183e51f32dd22f508d725a688903d58ace546c99d
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        ssh-agent.exe
                                                                                        • Path C:\Windows\System32\OpenSSH\ssh-agent.exe
                                                                                        • Size 1.9MB
                                                                                        • SHA256 f7c6b89eb22c80ff588a89ee3151ed6ddee3bff59b530db20629c56a39dd6847
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        PerceptionSimulationService.exe
                                                                                        • Path C:\Windows\System32\PerceptionSimulation\PerceptionSimulationService.exe
                                                                                        • Size 1.6MB
                                                                                        • SHA256 4561d0f6a9c9c0699d74fee8b450f78f94bb2ac24923bfacd22fba1240156540
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        ReFsDedupSvc.exe
                                                                                        • Path C:\Windows\System32\ReFsDedupSvc.exe
                                                                                        • Size 2.6MB
                                                                                        • SHA256 f24714290f2dd2c2076027f045e68f218e9f30598d9f21ee5129132c332a00f9
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        SearchIndexer.exe
                                                                                        • Path C:\Windows\System32\SearchIndexer.exe
                                                                                        • Size 1.4MB
                                                                                        • SHA256 ee7e796d7b4ee14b69e3ebd8ca688dd764228d0fb983a5a9b49cfabb59135284
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        SensorDataService.exe
                                                                                        • Path C:\Windows\System32\SensorDataService.exe
                                                                                        • Size 1.7MB
                                                                                        • SHA256 a3e9c8a1ec01ba8290c3512c2133810f4a81fc29da4c8ebe68b63fbb042d081b
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        opera-one-dark.jpg
                                                                                        • Path C:\Windows\SystemTemp\scoped_dir7660_1388658032\opera-one-dark.jpg
                                                                                        • Size 349KB
                                                                                        • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        persona.ini
                                                                                        • Path C:\Windows\SystemTemp\scoped_dir7660_1388658032\persona.ini
                                                                                        • Size 217B
                                                                                        • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        opera-one.jpg
                                                                                        • Path C:\Windows\SystemTemp\scoped_dir7660_855801080\opera-one.jpg
                                                                                        • Size 194KB
                                                                                        • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                        Submit Download

                                                                                        persona.ini
                                                                                        • Path C:\Windows\SystemTemp\scoped_dir7660_855801080\persona.ini
                                                                                        • Size 207B
                                                                                        • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                        Submit Download

                                                                                        memory/352-372-0x0000000140000000-0x0000000140172000-memory.dmp
                                                                                        Download

                                                                                        memory/352-150-0x0000000140000000-0x0000000140172000-memory.dmp
                                                                                        Download

                                                                                        memory/352-157-0x00000000006A0000-0x0000000000700000-memory.dmp
                                                                                        Download

                                                                                        memory/352-151-0x00000000006A0000-0x0000000000700000-memory.dmp
                                                                                        Download

                                                                                        memory/1092-75-0x0000000000400000-0x000000000056A000-memory.dmp
                                                                                        Download

                                                                                        memory/1092-300-0x0000000000400000-0x000000000056A000-memory.dmp
                                                                                        Download

                                                                                        memory/1600-38-0x0000000001E70000-0x0000000001ED0000-memory.dmp
                                                                                        Download

                                                                                        memory/1600-48-0x0000000001E70000-0x0000000001ED0000-memory.dmp
                                                                                        Download

                                                                                        memory/1600-44-0x0000000001E70000-0x0000000001ED0000-memory.dmp
                                                                                        Download

                                                                                        memory/1600-37-0x0000000140000000-0x00000001401A8000-memory.dmp
                                                                                        Download

                                                                                        memory/1600-50-0x0000000140000000-0x00000001401A8000-memory.dmp
                                                                                        Download

                                                                                        memory/3268-121-0x0000000140000000-0x0000000140211000-memory.dmp
                                                                                        Download

                                                                                        memory/3268-129-0x0000000000890000-0x00000000008F0000-memory.dmp
                                                                                        Download

                                                                                        memory/3268-371-0x0000000140000000-0x0000000140211000-memory.dmp
                                                                                        Download

                                                                                        memory/3268-123-0x0000000000890000-0x00000000008F0000-memory.dmp
                                                                                        Download

                                                                                        memory/3324-135-0x0000000000CD0000-0x0000000000D30000-memory.dmp
                                                                                        Download

                                                                                        memory/3324-134-0x0000000140000000-0x0000000140168000-memory.dmp
                                                                                        Download

                                                                                        memory/3324-141-0x0000000000CD0000-0x0000000000D30000-memory.dmp
                                                                                        Download

                                                                                        memory/3324-146-0x0000000000CD0000-0x0000000000D30000-memory.dmp
                                                                                        Download

                                                                                        memory/3324-148-0x0000000140000000-0x0000000140168000-memory.dmp
                                                                                        Download

                                                                                        memory/3372-71-0x0000000000B20000-0x0000000000B80000-memory.dmp
                                                                                        Download

                                                                                        memory/3372-246-0x0000000140000000-0x000000014019E000-memory.dmp
                                                                                        Download

                                                                                        memory/3372-63-0x0000000140000000-0x000000014019E000-memory.dmp
                                                                                        Download

                                                                                        memory/3372-65-0x0000000000B20000-0x0000000000B80000-memory.dmp
                                                                                        Download

                                                                                        memory/3464-1594-0x0000029243F10000-0x0000029244041000-memory.dmp
                                                                                        Download

                                                                                        memory/4076-78-0x0000000000400000-0x000000000058C000-memory.dmp
                                                                                        Download

                                                                                        memory/4076-2432-0x0000000000400000-0x000000000058C000-memory.dmp
                                                                                        Download

                                                                                        memory/4076-0-0x0000000000400000-0x000000000058C000-memory.dmp
                                                                                        Download

                                                                                        memory/4076-6-0x0000000002520000-0x0000000002587000-memory.dmp
                                                                                        Download

                                                                                        memory/4076-1-0x0000000002520000-0x0000000002587000-memory.dmp
                                                                                        Download

                                                                                        memory/4080-850-0x00007FFB10390000-0x00007FFB10391000-memory.dmp
                                                                                        Download

                                                                                        memory/4080-851-0x00007FFB11480000-0x00007FFB11481000-memory.dmp
                                                                                        Download

                                                                                        memory/4100-19-0x0000000000E00000-0x0000000000E60000-memory.dmp
                                                                                        Download

                                                                                        memory/4100-12-0x0000000140000000-0x00000001402E9000-memory.dmp
                                                                                        Download

                                                                                        memory/4100-13-0x0000000000E00000-0x0000000000E60000-memory.dmp
                                                                                        Download

                                                                                        memory/4100-20-0x0000000000E00000-0x0000000000E60000-memory.dmp
                                                                                        Download

                                                                                        memory/4100-116-0x0000000140000000-0x00000001402E9000-memory.dmp
                                                                                        Download

                                                                                        memory/4408-26-0x00000000007E0000-0x0000000000840000-memory.dmp
                                                                                        Download

                                                                                        memory/4408-33-0x00000000007E0000-0x0000000000840000-memory.dmp
                                                                                        Download

                                                                                        memory/4408-32-0x00000000007E0000-0x0000000000840000-memory.dmp
                                                                                        Download

                                                                                        memory/4408-25-0x0000000140000000-0x00000001402D4000-memory.dmp
                                                                                        Download

                                                                                        memory/4408-133-0x0000000140000000-0x00000001402D4000-memory.dmp
                                                                                        Download

                                                                                        memory/4572-53-0x00000000009B0000-0x0000000000A10000-memory.dmp
                                                                                        Download

                                                                                        memory/4572-199-0x0000000140000000-0x00000001401A2000-memory.dmp
                                                                                        Download

                                                                                        memory/4572-59-0x00000000009B0000-0x0000000000A10000-memory.dmp
                                                                                        Download

                                                                                        memory/4572-52-0x0000000140000000-0x00000001401A2000-memory.dmp
                                                                                        Download

                                                                                        memory/5456-427-0x0000000000730000-0x0000000000790000-memory.dmp
                                                                                        Download

                                                                                        memory/5456-332-0x0000000140000000-0x00000001402C9000-memory.dmp
                                                                                        Download

                                                                                        memory/5456-79-0x0000000140000000-0x00000001402C9000-memory.dmp
                                                                                        Download

                                                                                        memory/5456-429-0x0000000140000000-0x00000001402C9000-memory.dmp
                                                                                        Download

                                                                                        memory/5456-80-0x0000000000730000-0x0000000000790000-memory.dmp
                                                                                        Download

                                                                                        memory/5456-86-0x0000000000730000-0x0000000000790000-memory.dmp
                                                                                        Download

                                                                                        memory/5824-307-0x0000000000810000-0x0000000000870000-memory.dmp
                                                                                        Download

                                                                                        memory/5824-92-0x0000000000810000-0x0000000000870000-memory.dmp
                                                                                        Download

                                                                                        memory/5824-91-0x0000000140000000-0x00000001401BA000-memory.dmp
                                                                                        Download

                                                                                        memory/5824-98-0x0000000000810000-0x0000000000870000-memory.dmp
                                                                                        Download

                                                                                        memory/5824-314-0x0000000140000000-0x00000001401BA000-memory.dmp
                                                                                        Download