Overview

overview

8

Static

static

8

OperaInstaller.exe

windows10-2004-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    25/09/2026, 19:39

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaInstaller.exe
  • Size 178KB
  • Sample260925-ycxqcsvfqf
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Checks computer location settings 2 TTPs 23 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Writes a Windows system DLL name to a user directory 2 TTPs 2 IoCs

    A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

    defense_evasion
  • Adds Run key to start application 2 TTPs 4 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 15 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 22 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 7 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 43 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SendNotifyMessage 12 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe"
    1⤵
    • Downloads MZ/PE file
    • Checks computer location settings
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2548
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:3644
      • C:\Users\Admin\AppData\Local\Temp\7zSC3E71BC8\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zSC3E71BC8\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
        3⤵
        • Executes dropped EXE
        • Enumerates connected drives
        • Reads the TCP/IP host and domain name from the registry
        • Enumerates system info in registry
        • Modifies system certificate store
        • Suspicious use of WriteProcessMemory
        PID:3248
        • C:\Users\Admin\AppData\Local\Temp\7zSC3E71BC8\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zSC3E71BC8\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff638106998,0x7ff6381069a8,0x7ff6381069b8
          4⤵
          • Executes dropped EXE
          PID:2588
        • C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:3420
        • C:\Users\Admin\AppData\Local\Temp\7zSC3E71BC8\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zSC3E71BC8\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=3248 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\opera_package_20260925203922" --session-guid=4e9cfa8e-e472-4563-8b2c-8bd1aa74ea8e --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=8408000000000000
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Suspicious use of WriteProcessMemory
          PID:4912
          • C:\Users\Admin\AppData\Local\Temp\7zSC3E71BC8\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zSC3E71BC8\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x294,0x298,0x29c,0x264,0x2a0,0x7ff638106998,0x7ff6381069a8,0x7ff6381069b8
            5⤵
            • Executes dropped EXE
            PID:4228
          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe" --backend --initial-pid=3248 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\opera_package_202609252039221" --session-guid=4e9cfa8e-e472-4563-8b2c-8bd1aa74ea8e --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=136.0.6008.52
            5⤵
            • Executes dropped EXE
            • Enumerates connected drives
            • Modifies registry class
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:4092
            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff643d76998,0x7ff643d769a8,0x7ff643d769b8
              6⤵
              • Executes dropped EXE
              PID:4264
            • C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\opera_package_202609252039221\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\opera_package_202609252039221\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Writes a Windows system DLL name to a user directory
              • Adds Run key to start application
              • System Location Discovery: System Language Discovery
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:2704
              • C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\opera_package_202609252039221\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\opera_package_202609252039221\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x8ec9cc,0x8ec9d8,0x8ec9e4
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:4000
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:1600
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x240,0x244,0x248,0x21c,0x24c,0xcbc9cc,0xcbc9d8,0xcbc9e4
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:2336
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Reads the TCP/IP host and domain name from the registry
                  • System Location Discovery: System Language Discovery
                  • Enumerates system info in registry
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:3476
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:1904
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x23c,0x240,0x244,0x234,0x248,0x7ffbcd895d30,0x7ffbcd895d40,0x7ffbcd895d50
                      10⤵
                      • Executes dropped EXE
                      PID:1292
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:2540
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x238,0x23c,0x244,0x234,0x248,0x7ffbcd895d30,0x7ffbcd895d40,0x7ffbcd895d50
                      10⤵
                      • Executes dropped EXE
                      PID:572
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x27c,0x280,0x284,0x258,0x288,0xe07324,0xe07330,0xe0733c
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:5204
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:5244
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x23c,0x240,0x244,0x238,0x248,0x7ffbcd895d30,0x7ffbcd895d40,0x7ffbcd895d50
                        11⤵
                        • Executes dropped EXE
                        PID:5272
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:5356
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x23c,0x240,0x244,0x238,0x248,0x7ffbcd895d30,0x7ffbcd895d40,0x7ffbcd895d50
                        11⤵
                        • Executes dropped EXE
                        PID:5380
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:5544
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ffbcd895d30,0x7ffbcd895d40,0x7ffbcd895d50
                        11⤵
                        • Executes dropped EXE
                        PID:5652
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\opera_package_202609252039221\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Program Files directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:3856
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ffbcd895d30,0x7ffbcd895d40,0x7ffbcd895d50
                7⤵
                • Executes dropped EXE
                PID:1100
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1756,i,18121035189940386111,8768678086253664237,262144 --field-trial-handle=2140,i,9018039332024725256,6645784649599669184,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2148,i,13905087338628857561,10607744218193470331,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2128 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5500
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2084,i,2167493196342217278,13470025737947405343,524288 --field-trial-handle=2140,i,9018039332024725256,6645784649599669184,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2148,i,13905087338628857561,10607744218193470331,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2164 /prefetch:3
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                • Enumerates system info in registry
                PID:5508
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2520,i,7383226152132530895,480580685960187299,524288 --field-trial-handle=2140,i,9018039332024725256,6645784649599669184,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2148,i,13905087338628857561,10607744218193470331,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2536 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5620
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3420,i,17553528001817082933,10393277172754096736,2097152 --field-trial-handle=2140,i,9018039332024725256,6645784649599669184,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2148,i,13905087338628857561,10607744218193470331,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3740 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6032
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4160,i,6426098037597896604,1008530867405389209,524288 --field-trial-handle=2140,i,9018039332024725256,6645784649599669184,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2148,i,13905087338628857561,10607744218193470331,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4168 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4232
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4208,i,5314256295602624486,10815998022081045904,524288 --field-trial-handle=2140,i,9018039332024725256,6645784649599669184,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2148,i,13905087338628857561,10607744218193470331,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4560 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5548
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4680,i,9288217453255142266,8123703031464893889,524288 --field-trial-handle=2140,i,9018039332024725256,6645784649599669184,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2148,i,13905087338628857561,10607744218193470331,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4688 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:5336
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4832,i,15189926939901752290,8729139163486386535,2097152 --field-trial-handle=2140,i,9018039332024725256,6645784649599669184,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2148,i,13905087338628857561,10607744218193470331,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4880 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                PID:5484
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5040,i,9000079247466347536,7596978194959525981,2097152 --field-trial-handle=2140,i,9018039332024725256,6645784649599669184,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2148,i,13905087338628857561,10607744218193470331,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5084 /prefetch:1
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6600
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4148,i,687920619722940692,10495242107204631171,524288 --field-trial-handle=2140,i,9018039332024725256,6645784649599669184,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2148,i,13905087338628857561,10607744218193470331,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4240 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6704
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\opera_package_202609252039221\additional_file2.tmp"
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Program Files directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:6828
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x23c,0x240,0x244,0x238,0x248,0x7ffbcd895d30,0x7ffbcd895d40,0x7ffbcd895d50
                7⤵
                • Executes dropped EXE
                PID:6700
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1708,i,14240553084279437478,2636540632063362696,262144 --field-trial-handle=2088,i,3666306906428054931,6531164893845844588,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,3221424001089000914,17785390901608910494,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2084 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6648
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1980,i,16604073193003760518,10845808750685654894,524288 --field-trial-handle=2088,i,3666306906428054931,6531164893845844588,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,3221424001089000914,17785390901608910494,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2120 /prefetch:3
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                • Enumerates system info in registry
                PID:7008
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2536,i,7967866159177577162,17300465192845424773,524288 --field-trial-handle=2088,i,3666306906428054931,6531164893845844588,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,3221424001089000914,17785390901608910494,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2728 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:7088
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1716,i,5506761462773725079,17718606220825407412,524288 --field-trial-handle=2088,i,3666306906428054931,6531164893845844588,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,3221424001089000914,17785390901608910494,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=1908 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6212
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4012,i,16868162457454785150,4685622154292748595,2097152 --field-trial-handle=2088,i,3666306906428054931,6531164893845844588,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,3221424001089000914,17785390901608910494,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4020 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:5784
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4596,i,17892262642567984643,3367578057352272013,2097152 --field-trial-handle=2088,i,3666306906428054931,6531164893845844588,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,3221424001089000914,17785390901608910494,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4652 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6288
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3892,i,1734303372180751049,7395840412385471206,524288 --field-trial-handle=2088,i,3666306906428054931,6531164893845844588,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,3221424001089000914,17785390901608910494,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4824 /prefetch:8
                7⤵
                • Executes dropped EXE
                PID:7272
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3972,i,15582310168230351514,9789595689139952688,524288 --field-trial-handle=2088,i,3666306906428054931,6531164893845844588,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,3221424001089000914,17785390901608910494,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4964 /prefetch:8
                7⤵
                • Executes dropped EXE
                PID:5824
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4624,i,15676126334550829288,8421583994505352222,524288 --field-trial-handle=2088,i,3666306906428054931,6531164893845844588,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,3221424001089000914,17785390901608910494,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4528 /prefetch:8
                7⤵
                • Executes dropped EXE
                PID:7560
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Adds Run key to start application
              • Drops file in Program Files directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:6704
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffbcd895d30,0x7ffbcd895d40,0x7ffbcd895d50
                7⤵
                • Executes dropped EXE
                PID:5252
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1696,i,9391340837868866545,8869209372047959322,262144 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1976 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6476
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2020,i,6226502418514872679,13488449789061000934,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2168 /prefetch:3
                7⤵
                • Executes dropped EXE
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                • Enumerates system info in registry
                PID:6748
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2520,i,1211029297964647602,12093386323306334908,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2748 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:5444
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3208,i,9547901024191952803,15847173404759059024,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3296 /prefetch:8
                7⤵
                • Executes dropped EXE
                PID:5672
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3220,i,11132735769791362354,10778740384186255066,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3304 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6032
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3232,i,1362342792287665149,18176922739020400818,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3336 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:5848
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3244,i,11913597112753458487,11814370113811866821,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3352 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:5484
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3256,i,10323399222681046584,16093560349157372556,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3372 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6872
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3268,i,1535648055195042066,11572422667419754979,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3364 /prefetch:8
                7⤵
                • Executes dropped EXE
                PID:6928
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3280,i,6610054946764261392,15465186085891434991,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3436 /prefetch:8
                7⤵
                • Executes dropped EXE
                PID:2856
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4168,i,14082300053474931854,16439277066667916346,2097152 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4216 /prefetch:1
                7⤵
                • Checks computer location settings
                • Enumerates system info in registry
                PID:5608
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_gx_splash.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                7⤵
                • Modifies registry class
                • Suspicious use of AdjustPrivilegeToken
                PID:7380
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4804,i,3353819559412182431,6826761784921898210,2097152 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4824 /prefetch:2
                7⤵
                • Checks computer location settings
                PID:7756
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4964,i,3561358440809542308,4237141504667443707,2097152 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4996 /prefetch:1
                7⤵
                • Checks computer location settings
                • Enumerates system info in registry
                PID:7748
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5280,i,16084085350384687812,8947130404108612284,2097152 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5288 /prefetch:1
                7⤵
                • Checks computer location settings
                PID:7604
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5424,i,7112512694227892114,4921887246348847012,2097152 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5436 /prefetch:1
                7⤵
                • Checks computer location settings
                • Enumerates system info in registry
                PID:7976
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6440,i,3515046740684973254,68793364743955120,2097152 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6332 /prefetch:2
                7⤵
                • Checks computer location settings
                PID:7820
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6740,i,13965875330875379847,9691979771727396239,2097152 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6752 /prefetch:2
                7⤵
                • Checks computer location settings
                PID:6264
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6428,i,6011437823876807238,520339362539415786,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=1880 /prefetch:8
                7⤵
                • Enumerates system info in registry
                PID:7304
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6776,i,10572580233880733491,12666050532033192989,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6796 /prefetch:8
                7⤵
                • Enumerates system info in registry
                PID:8
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6344,i,8801198884363861755,13112600404506870534,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6572 /prefetch:8
                7⤵
                • Enumerates system info in registry
                PID:876
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6808,i,14420252337717938198,13679856433480571942,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7124 /prefetch:8
                7⤵
                • Enumerates system info in registry
                PID:2296
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6604,i,5372942253753212258,2363279552160011201,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7192 /prefetch:8
                7⤵
                  PID:980
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6432,i,12993678733180624796,14999098461250301235,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7172 /prefetch:8
                  7⤵
                    PID:1208
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6760,i,9407825354036289134,12052263091673296402,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7144 /prefetch:8
                    7⤵
                    • Enumerates system info in registry
                    PID:4032
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6920,i,13693019134011826729,1999626381441754841,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7216 /prefetch:8
                    7⤵
                    • Enumerates system info in registry
                    PID:4444
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7992,i,5925416052776522921,8207548458498126165,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8020 /prefetch:8
                    7⤵
                      PID:5212
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8008,i,18332178874837842283,1206860350652912224,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8032 /prefetch:8
                      7⤵
                        PID:6876
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8056,i,12558245980048645473,4445626707983038951,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8096 /prefetch:8
                        7⤵
                          PID:5432
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8044,i,6999550963634414420,4057782904820323756,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8076 /prefetch:8
                          7⤵
                            PID:6764
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8560,i,11317357681412924529,17451587697495190408,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8080 /prefetch:8
                            7⤵
                            • Enumerates system info in registry
                            PID:6284
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8684,i,5993137424601540477,15517441049414729761,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8696 /prefetch:8
                            7⤵
                              PID:6640
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=8832,i,7601592987843969630,10494686857402567904,2097152 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8844 /prefetch:1
                              7⤵
                              • Checks computer location settings
                              PID:6444
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9464,i,9864228209288435257,10071683868604033492,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9508 /prefetch:8
                              7⤵
                              • Enumerates system info in registry
                              PID:7220
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9484,i,352605539741224258,4469915880450487951,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9528 /prefetch:8
                              7⤵
                              • Enumerates system info in registry
                              PID:7416
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9496,i,10329734930372707705,4612328807529737362,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9548 /prefetch:8
                              7⤵
                              • Enumerates system info in registry
                              PID:7424
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=9868,i,17234540846482215288,9720524580937195335,2097152 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9884 /prefetch:2
                              7⤵
                              • Checks computer location settings
                              PID:6180
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10044,i,8950290102916409736,5681297638792769678,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=10052 /prefetch:8
                              7⤵
                                PID:4772
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10208,i,7976125081790998078,13285490422309793144,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10056 /prefetch:8
                                7⤵
                                  PID:7524
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10332,i,7762258007296148848,6549469594326292072,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10356 /prefetch:8
                                  7⤵
                                    PID:2988
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10512,i,14916819674357420014,13396570883961298320,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10500 /prefetch:8
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:6380
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                    7⤵
                                    • Reads the TCP/IP host and domain name from the registry
                                    PID:8792
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                      C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x29c,0x2a0,0x2a4,0x278,0x2a8,0x7ff6a04d5598,0x7ff6a04d55a8,0x7ff6a04d55b8
                                      8⤵
                                        PID:9156
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10528,i,16892930324489121451,13439772611393214026,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10696 /prefetch:8
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:8804
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=9924,i,3817349124941877707,17954971148089428616,2097152 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=5900 /prefetch:1
                                      7⤵
                                      • Checks computer location settings
                                      • Enumerates system info in registry
                                      PID:9176
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe" --fix-taskbar-pins
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:1196
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe
                                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff643d76998,0x7ff643d769a8,0x7ff643d769b8
                                        8⤵
                                          PID:6432
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11076,i,5559927463632465465,15411155731267233825,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11088 /prefetch:8
                                        7⤵
                                          PID:7740
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11240,i,8189374237660445363,8485651415538386071,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11252 /prefetch:8
                                          7⤵
                                            PID:6728
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8904,i,7819344414774207096,4650976596680651417,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=9932 /prefetch:8
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:5828
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10488,i,4754353837180775661,14761322190349288382,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=4232 /prefetch:8
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:4692
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11512,i,17505278674085195667,12748904258583258040,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=11508 /prefetch:8
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:4568
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4208,i,7806001120677730330,3840580532278585309,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=10488 /prefetch:8
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:8036
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3592,i,11433190703804431330,7520366091387130746,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=3584 /prefetch:8
                                            7⤵
                                              PID:8408
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4228,i,2212281050154869636,854255764861184862,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=3676 /prefetch:8
                                              7⤵
                                              • Enumerates system info in registry
                                              PID:8468
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3652,i,2631702558319618706,9191729180069377895,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=3884 /prefetch:8
                                              7⤵
                                                PID:8544
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3416,i,14594510925842741039,6254153625161653852,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=8704 /prefetch:8
                                                7⤵
                                                • Enumerates system info in registry
                                                PID:8660
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=4008,i,6073176391612679887,4404262801069169396,2097152 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=5696 /prefetch:2
                                                7⤵
                                                • Checks computer location settings
                                                • Enumerates system info in registry
                                                PID:6776
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=3616,i,3965349094190703781,5620716611418995977,2097152 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=5744 /prefetch:2
                                                7⤵
                                                • Checks computer location settings
                                                • Enumerates system info in registry
                                                PID:8912
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3712,i,16983997220660220101,8044900057732711807,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=9932 /prefetch:8
                                                7⤵
                                                  PID:6048
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=3208,i,1915565443565913097,10552455919612103248,2097152 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=7164 /prefetch:2
                                                  7⤵
                                                  • Checks computer location settings
                                                  • Enumerates system info in registry
                                                  PID:5820
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=3344,i,2555365736001320096,17951961206562824876,2097152 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=5808 /prefetch:2
                                                  7⤵
                                                  • Checks computer location settings
                                                  • Enumerates system info in registry
                                                  PID:8344
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11144,i,2571229986767391836,16381040578623001548,524288 --field-trial-handle=1980,i,16883153391469860558,15317765570431664107,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1984,i,17477509727444728164,17837401295989560865,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=7812 /prefetch:8
                                                  7⤵
                                                    PID:8772
                                            • C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\opera_package_202609252039221\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe
                                              "C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\opera_package_202609252039221\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe"
                                              4⤵
                                              • Executes dropped EXE
                                              • Writes a Windows system DLL name to a user directory
                                              • System Location Discovery: System Language Discovery
                                              PID:3208
                                            • C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\opera_package_202609252039221\assistant\assistant_installer.exe
                                              "C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\opera_package_202609252039221\assistant\assistant_installer.exe" --version
                                              4⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              • System Location Discovery: System Language Discovery
                                              • Enumerates system info in registry
                                              • Suspicious use of WriteProcessMemory
                                              PID:1912
                                              • C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\opera_package_202609252039221\assistant\assistant_installer.exe
                                                "C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\opera_package_202609252039221\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x8ec9cc,0x8ec9d8,0x8ec9e4
                                                5⤵
                                                • Executes dropped EXE
                                                • Loads dropped DLL
                                                • System Location Discovery: System Language Discovery
                                                PID:3756
                                      • C:\Windows\SysWOW64\DllHost.exe
                                        C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
                                        1⤵
                                        • System Location Discovery: System Language Discovery
                                        • Suspicious use of SetWindowsHookEx
                                        PID:2516
                                      • C:\Windows\system32\wbem\unsecapp.exe
                                        C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                        1⤵
                                          PID:6592
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                          1⤵
                                          • Executes dropped EXE
                                          • Loads dropped DLL
                                          • Enumerates system info in registry
                                          • Suspicious use of WriteProcessMemory
                                          PID:6692
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                                            C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ffbcd895d30,0x7ffbcd895d40,0x7ffbcd895d50
                                            2⤵
                                            • Executes dropped EXE
                                            PID:6888
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                          C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                          1⤵
                                          • Reads the TCP/IP host and domain name from the registry
                                          • Enumerates system info in registry
                                          PID:9104
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                            C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x274,0x278,0x27c,0x210,0x280,0x7ff6a04d5598,0x7ff6a04d55a8,0x7ff6a04d55b8
                                            2⤵
                                              PID:7816
                                            • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                              "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                              2⤵
                                                PID:6220

                                            Network

                                                  MITRE ATT&CK Enterprise v16

                                                  Reconnaissance

                                                  Resource Development

                                                  Initial Access

                                                  Execution

                                                  Persistence

                                                  Boot or Logon Autostart Execution

                                                  1
                                                  T1547

                                                  Registry Run Keys / Startup Folder

                                                  1
                                                  T1547.001

                                                  Event Triggered Execution

                                                  1
                                                  T1546

                                                  Component Object Model Hijacking

                                                  1
                                                  T1546.015

                                                  Hijack Execution Flow

                                                  1
                                                  T1574

                                                  DLL Search Order Hijacking

                                                  1
                                                  T1574.001

                                                  Privilege Escalation

                                                  Boot or Logon Autostart Execution

                                                  1
                                                  T1547

                                                  Registry Run Keys / Startup Folder

                                                  1
                                                  T1547.001

                                                  Event Triggered Execution

                                                  1
                                                  T1546

                                                  Component Object Model Hijacking

                                                  1
                                                  T1546.015

                                                  Hijack Execution Flow

                                                  1
                                                  T1574

                                                  DLL Search Order Hijacking

                                                  1
                                                  T1574.001

                                                  Defense Evasion

                                                  Hijack Execution Flow

                                                  1
                                                  T1574

                                                  DLL Search Order Hijacking

                                                  1
                                                  T1574.001

                                                  Masquerading

                                                  1
                                                  T1036

                                                  Match Legitimate Name or Location

                                                  1
                                                  T1036.005

                                                  Modify Registry

                                                  3
                                                  T1112

                                                  Subvert Trust Controls

                                                  1
                                                  T1553

                                                  Install Root Certificate

                                                  1
                                                  T1553.004

                                                  Credential Access

                                                  Credentials from Password Stores

                                                  1
                                                  T1555

                                                  Credentials from Web Browsers

                                                  1
                                                  T1555.003

                                                  Unsecured Credentials

                                                  1
                                                  T1552

                                                  Credentials In Files

                                                  1
                                                  T1552.001

                                                  Discovery

                                                  Peripheral Device Discovery

                                                  1
                                                  T1120

                                                  Query Registry

                                                  6
                                                  T1012

                                                  System Information Discovery

                                                  5
                                                  T1082

                                                  System Location Discovery

                                                  1
                                                  T1614

                                                  System Language Discovery

                                                  1
                                                  T1614.001

                                                  System Network Configuration Discovery

                                                  1
                                                  T1016

                                                  System Time Discovery

                                                  1
                                                  T1124

                                                  Lateral Movement

                                                  Collection

                                                  Data from Local System

                                                  1
                                                  T1005

                                                  Command and Control

                                                  Exfiltration

                                                  Impact

                                                  Replay Monitor

                                                  Loading Replay Monitor...

                                                  Downloads

                                                  manifest.json
                                                  • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6704_1447973762\manifest.json
                                                  • Size 202B
                                                  • SHA256 8bd59f33a6e286c7e7352dfaebc9b03cea4e0e959a8ebb2f04b69bd92e107dc1
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  opera-one-dark.jpg
                                                  • Path C:\Program Files\scoped_dir6704_1419633329\opera-one-dark.jpg
                                                  • Size 349KB
                                                  • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  persona.ini
                                                  • Path C:\Program Files\scoped_dir6704_1419633329\persona.ini
                                                  • Size 217B
                                                  • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  opera-one.jpg
                                                  • Path C:\Program Files\scoped_dir6704_1456137751\opera-one.jpg
                                                  • Size 194KB
                                                  • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  persona.ini
                                                  • Path C:\Program Files\scoped_dir6704_1456137751\persona.ini
                                                  • Size 207B
                                                  • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                  • Size 471B
                                                  • SHA256 ac6b8071d1ce338e6890adb8a2bd9c9f771608ef2a12030a7c9bbc11c1d2ce29
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                  • Size 416B
                                                  • SHA256 6fba8432dfa0fac3b7a4c847fb84dca06dd8c21c5daef12ee0ebe3c881e56faa
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  136.0.6008.52.manifest
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\136.0.6008.52.manifest
                                                  • Size 225B
                                                  • SHA256 e4932cf87759845a5f1bdd3199ae94d5896f4ce58f8b6b9fa24942f90a7fa7f9
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  150x150Logo.scale-100.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-100.png
                                                  • Size 1KB
                                                  • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  150x150Logo.scale-100_contrast-white.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-100_contrast-white.png
                                                  • Size 1KB
                                                  • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  150x150Logo.scale-140.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-140.png
                                                  • Size 1KB
                                                  • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  150x150Logo.scale-140_contrast-white.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-140_contrast-white.png
                                                  • Size 1KB
                                                  • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  150x150Logo.scale-180.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-180.png
                                                  • Size 1KB
                                                  • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  150x150Logo.scale-180_contrast-white.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-180_contrast-white.png
                                                  • Size 1KB
                                                  • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  150x150Logo.scale-80.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-80.png
                                                  • Size 827B
                                                  • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  150x150Logo.scale-80_contrast-white.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-80_contrast-white.png
                                                  • Size 799B
                                                  • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  70x70Logo.scale-100.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-100.png
                                                  • Size 781B
                                                  • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  70x70Logo.scale-100_contrast-white.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-100_contrast-white.png
                                                  • Size 752B
                                                  • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  70x70Logo.scale-140.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-140.png
                                                  • Size 991B
                                                  • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  70x70Logo.scale-140_contrast-white.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-140_contrast-white.png
                                                  • Size 865B
                                                  • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  70x70Logo.scale-180.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-180.png
                                                  • Size 1KB
                                                  • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  70x70Logo.scale-180_contrast-white.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-180_contrast-white.png
                                                  • Size 1KB
                                                  • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  70x70Logo.scale-80.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-80.png
                                                  • Size 590B
                                                  • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  70x70Logo.scale-80_contrast-white.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-80_contrast-white.png
                                                  • Size 519B
                                                  • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  assistant_package
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\assistant_package
                                                  • Size 3.6MB
                                                  • SHA256 fbbc603017d6361fbf735e11ba816cceadad30328bb2ede9ecee73f2b56bd59c
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  d3dcompiler_47.dll
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\d3dcompiler_47.dll
                                                  • Size 4.5MB
                                                  • SHA256 4b87ecdd1bfd4b8143452d107d9ea7a917f7e03c1f517b9b95cbae5ca3999069
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  dxcompiler.dll
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\dxcompiler.dll
                                                  • Size 24.6MB
                                                  • SHA256 b38658d0c434edc2d13247956a6aafd1438851f959ad61b5f9e0c1bba6bd2d9f
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  dxil.dll
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\dxil.dll
                                                  • Size 1.5MB
                                                  • SHA256 cdb874862b72cfcdb6dbdca698b462e1546c7fc9b215151c73c8f4681ad6c799
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  files_list
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\files_list
                                                  • Size 6KB
                                                  • SHA256 0c087ff2c9b81050f0e8940371993a46a90267bdd94af7b5152787245dcb2742
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  headless_command_resources.pak
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\headless_command_resources.pak
                                                  • Size 2KB
                                                  • SHA256 90e398ef08a0178d1efd373addb5070a551011be8b9d27fcc2f234e430a8ad98
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  icudtl.dat
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\icudtl.dat
                                                  • Size 10.4MB
                                                  • SHA256 f11071c692e85689891070cb6f68120dc1a49941325325f7e5b017af42483e72
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  installer.exe
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe
                                                  • Size 8.3MB
                                                  • SHA256 07615e6bf94841a360802ceb411b81e8329dd21b57c2045335b99c36c007f5d8
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  installer_helper_64.exe
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer_helper_64.exe
                                                  • Size 601KB
                                                  • SHA256 3ab73bfb35ec3d7c20511f2c2e9ca60ef7514f15641209705fa9b8058de4c190
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  libEGL.dll
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\libEGL.dll
                                                  • Size 460KB
                                                  • SHA256 628f6a6eb054218f3357381d42ebf63e008316e564e1695ebd2925b7c6d050eb
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  libGLESv2.dll
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\libGLESv2.dll
                                                  • Size 460KB
                                                  • SHA256 6ea449f57a607ce9d6186bca8a16514c52ee112d94e3af2e69beb904b54593cd
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  bg.pak
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\bg.pak
                                                  • Size 1021KB
                                                  • SHA256 7958eea00f4ef14a9b3a9021b87ae4cdace36ca171d6487e09427c980925066a
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  bn.pak
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\bn.pak
                                                  • Size 1.3MB
                                                  • SHA256 6307636ac68ea9742dba9dcafd1a6cba2c086be46c25fc10c9392a083f67a763
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  ca.pak
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\ca.pak
                                                  • Size 642KB
                                                  • SHA256 0cb115bf30541172098fb7a542713d2a86607e1c9f6c36e459015f0b2cc2876c
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  cs.pak
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\cs.pak
                                                  • Size 641KB
                                                  • SHA256 b8a82ad00c2a033704cf0a9b6a20d4c48f61cab7d6fafd60d5ed7120946d0a64
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  da.pak
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\da.pak
                                                  • Size 590KB
                                                  • SHA256 1d767d2231eeaf346ee7d5eafceaef5884df41666cafa057ec9784da278a75c1
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  de.pak
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\de.pak
                                                  • Size 639KB
                                                  • SHA256 ed7fd31b1e80c5de13e985a0c15becf8c99f6bc153891c853e144a05b1bf603f
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  el.pak
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\el.pak
                                                  • Size 1.1MB
                                                  • SHA256 fa8f4b42f21b74e386c88f66aa6802076e78da4e442fd74d875cbccd6af00419
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  en-GB.pak
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\en-GB.pak
                                                  • Size 518KB
                                                  • SHA256 6f735948c21e15f796292e92dda0f4820982774f9b3adfd31a6a3c11284783fc
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  installer_prefs.json
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                                  • Size 1KB
                                                  • SHA256 bd75c4d427f148bf43c67b4507a922b1eb55078d6e6c40fd0ea6b01f7ab2341a
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  opera.exe
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  • Size 3.4MB
                                                  • SHA256 7062548e4746e875ba08b20ff967a4bd863d3eee05f6cd9356a90d5d8ac41d51
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Opera Browser.lnk
                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\opera_package_202609252039221\Opera Browser.lnk
                                                  • Size 1KB
                                                  • SHA256 1d6c267cd231341b30ac989b8adc48430b134d2eb57cd9bcc8c6e59bf0fb4cf1
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  Assistant_136.0.6008.52_Setup.exe_sfx.exe
                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\opera_package_202609252039221\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe
                                                  • Size 2.9MB
                                                  • SHA256 30786977e61add36f7c641facfb7fce1b2ec7c2a0a7e055a172f127a68788556
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  assistant_installer.exe
                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\opera_package_202609252039221\assistant\assistant_installer.exe
                                                  • Size 2.4MB
                                                  • SHA256 e8dce277d6edb918499526fadba9902e317496c2af077219f263a7a643467824
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  dbgcore.DLL
                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\opera_package_202609252039221\assistant\dbgcore.DLL
                                                  • Size 196KB
                                                  • SHA256 c16220edd3787da33dbd3ac2fcbec7de6a13e2baf14ae6105bba68d4efd83628
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  dbghelp.dll
                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\opera_package_202609252039221\assistant\dbghelp.dll
                                                  • Size 1.8MB
                                                  • SHA256 990b13e88b4a9985eb5c596078e2ec26a0edcc22169dd71f8a84c7943005306c
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  installer_prefs_include.json
                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\opera_package_202609252039221\installer_prefs_include.json
                                                  • Size 239B
                                                  • SHA256 ad0a70852936dbf15eeb5accadd7acc1554959df5b85898911e4281e402e287a
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  installer_prefs_include.json
                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\opera_package_202609252039221\installer_prefs_include.json
                                                  • Size 1KB
                                                  • SHA256 b28d6d671fbe7ceccfa2fee60dfb87f1dc704f68b98f5b48db22b724424a0afb
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  installer_prefs_include.json.backup
                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\5b597b0d-f928-4dfe-8bd8-99b6ce8b2c7d Opera Installer Temp\opera_package_202609252039221\installer_prefs_include.json.backup
                                                  • Size 224B
                                                  • SHA256 f799101396e58ec98238b81669c288b0649788476fdc997cd029cfd5239c8aad
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  installer.exe
                                                  • Path C:\Users\Admin\AppData\Local\Temp\7zSC3E71BC8\installer.exe
                                                  • Size 8.3MB
                                                  • SHA256 a98e228f9d31c84cec88654b9fbf48e8bbec816fd1ab935572f448fd997c2c31
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  OpInst.exe
                                                  • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                                  • Size 3.1MB
                                                  • SHA256 41050c6c748d0c3392eab0cde06023fc3e331085adc8095e02e51b18eae634d0
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  bg.png
                                                  • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                                  • Size 224KB
                                                  • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  favicon_opera_one.png
                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3856_78673773\CRX_INSTALL\favicon_opera_one.png
                                                  • Size 2KB
                                                  • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  manifest.json
                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3856_78673773\CRX_INSTALL\manifest.json
                                                  • Size 3KB
                                                  • SHA256 edf3f7c95ebed10cfa1c14b63a306a176d05ca454a0c334064e13bbdbb9c919c
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  service_worker.js
                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3856_78673773\CRX_INSTALL\service_worker.js
                                                  • Size 92KB
                                                  • SHA256 e4a71cc9098780c7cd5ba8a5ebfdf9d3d281a5710ed3b596b6c751d2886cd8eb
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3856_78673773\de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                  • Size 4.6MB
                                                  • SHA256 e81986014a4fb55c0aa220745d2433c51ad29166b32693de8911784dd3920584
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Icon_Light_Neutral.png
                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6704_1233010496\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                  • Size 2KB
                                                  • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  da3ae3b9-ea7d-4be4-8072-3248784b68b3.tmp
                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6704_1233010496\da3ae3b9-ea7d-4be4-8072-3248784b68b3.tmp
                                                  • Size 2.6MB
                                                  • SHA256 19bc35ca347a6560c0183e56da6bee3353737e78aa9eff9111c5ebd897b0cfd5
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  910a01c7-c7c4-4fd3-bc26-fa2767f9a700.tmp
                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6704_367019485\910a01c7-c7c4-4fd3-bc26-fa2767f9a700.tmp
                                                  • Size 46KB
                                                  • SHA256 176a736c95c08746480a0e25f7acf323d502d0f6aac4b4dfbeb2713513af8a52
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  9609f668-8004-427a-8191-f8e9e9cbac21.tmp
                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6704_641895619\9609f668-8004-427a-8191-f8e9e9cbac21.tmp
                                                  • Size 13KB
                                                  • SHA256 ce8adf970c3290b7ea94c85727c5abe7eb232e16026a1f8f876ad7f3ec03573d
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6828_2071313153\CRX_INSTALL\_locales\en\messages.json
                                                  • Size 401B
                                                  • SHA256 9ad8ffac49958d5bf771eb6f0bd7462b32597696c9d0a45ade771ef8c124b1bb
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6828_2071313153\CRX_INSTALL\_locales\en_GB\messages.json
                                                  • Size 387B
                                                  • SHA256 554cbb0514a7897ebe50043e0de9fabfcf321dcbd3c39e77cb96e62d871c7bc3
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6828_2071313153\CRX_INSTALL\_locales\es_419\messages.json
                                                  • Size 424B
                                                  • SHA256 b04b308252b490b9555e5e002c5c6da63f3a6d517e2f659a626a500467e21100
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  manifest.json
                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6828_2071313153\CRX_INSTALL\manifest.json
                                                  • Size 4KB
                                                  • SHA256 dee09929862d037e825b73576a80272b344d7c8e90a3d245a658f5b54486e9d7
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  pipeline.json
                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6828_2071313153\CRX_INSTALL\source\shaders\pipeline.json
                                                  • Size 146B
                                                  • SHA256 9e4ae1e22f4ebc23b914d04a4d0cd0b79639dfa609d830b62cc0285dc4a95bba
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  accent.png
                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6828_2071313153\CRX_INSTALL\wallpaper\color_picker\accent.png
                                                  • Size 99KB
                                                  • SHA256 0ba039580d11744514f1734bd6ed144bcd8ef605f61b9c4c2fa300a5afae3348
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  background.png
                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6828_2071313153\CRX_INSTALL\wallpaper\color_picker\background.png
                                                  • Size 70KB
                                                  • SHA256 44cb4f1b7692d39f251bd2dd24352fff8ce8d9b2bcc47506e642ee4dd3f96f11
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  additional_file2.tmp
                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6828_2071313153\additional_file2.tmp
                                                  • Size 937KB
                                                  • SHA256 73355e09adb2bbb96a8e146e1098ad18036d58353d87f78cf4e6183c1f8fa8a6
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  settings.dat
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                  • Size 40B
                                                  • SHA256 02f250aa30aa4464084c1eefe332f78aab24ecafa056d4f17c62010670302cca
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  40085292-302b-46f0-8367-6088b05d3ca8.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\40085292-302b-46f0-8367-6088b05d3ca8.tmp
                                                  • Size 171B
                                                  • SHA256 fb6eeb5d036e829930630cc19b00a8ee6fa913945eb5f655d84728fdd16f9fa2
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  486b246d-bfca-4498-bafb-28fe1df70438.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\486b246d-bfca-4498-bafb-28fe1df70438.tmp
                                                  • Size 203B
                                                  • SHA256 d5bd1ea0c07c1b283b69e5663eed1331a7a35e4ebcf73f4a7936fcb98df17777
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  6aaa3b86-8896-4d67-af67-a1f04639b2f0.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\6aaa3b86-8896-4d67-af67-a1f04639b2f0.tmp
                                                  • Size 456B
                                                  • SHA256 7c4e0af8ead35264e2bebc803a9f54238fd672b2333b886cc86256a3e07b80e5
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  BookmarkMergedSurfaceOrdering114d7489-922d-4d59-970d-e4634a7f5cac.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarkMergedSurfaceOrdering114d7489-922d-4d59-970d-e4634a7f5cac.tmp
                                                  • Size 6B
                                                  • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  Bookmarks
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                                  • Size 36KB
                                                  • SHA256 3370083fefac771893efb1c198ad808b067fd447003c481b2c47075ec68d9388
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  BookmarksExtras
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                                                  • Size 201KB
                                                  • SHA256 edf05a7b7dd6df91a6022e52d031ab80ba4f98b0e09d2fefbf9f091a08e68399
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  BookmarksExtrasb3d07946-0c3d-4732-9cc4-7177fadf9bcf.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtrasb3d07946-0c3d-4732-9cc4-7177fadf9bcf.tmp
                                                  • Size 2B
                                                  • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  the-real-index
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                  • Size 48B
                                                  • SHA256 e83922427235cc58c8e0c433d1b72ef28b2664ea5624b383d8abbe872694baa2
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  the-real-index
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                  • Size 336B
                                                  • SHA256 d8de4df53769aebe2659e36941d5ee80906598edb5e0d6e2fd5c7d5d703b6c12
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  the-real-index
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                  • Size 336B
                                                  • SHA256 8a7e5094e4f265a51391824615ca0f1e17616670256a18c602b19b703539b180
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  the-real-index
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                  • Size 744B
                                                  • SHA256 d3e18d19f6676a18364b175a1a0817836af1e57b8a222ec4295c97117b78643e
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  index
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\index
                                                  • Size 256KB
                                                  • SHA256 1d9d7901df595ca0409727741afc2af927e37c9ff68c0c41e070697079a7238e
                                                  • MD5 SHA1 SHA512 SSDEEP
                                                  Submit Download

                                                  000001.dbtmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\000001.dbtmp
                                                  • Size 16B
                                                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  MANIFEST-000001
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
                                                  • Size 41B
                                                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  reader_mode.js
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir3856_643226686\CRX_INSTALL\reader_mode.js
                                                  • Size 112KB
                                                  • SHA256 17f8a5c1d70acee668cc6964317d88802d4409c32b0d7e292b95e1de8ddb16df
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  spotify_frame_interceptor.js
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir3856_643226686\CRX_INSTALL\spotify_frame_interceptor.js
                                                  • Size 5KB
                                                  • SHA256 895ef6ae0efde6f5e8af23d1acbfac4a5351bda31c89d2e64c05f2de0181dd56
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\bg\messages.json
                                                  • Size 580B
                                                  • SHA256 f1b238d97566981d936945e64c0066b1d4fd3f6392c16ac0463d3b46fd468714
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\bn\messages.json
                                                  • Size 809B
                                                  • SHA256 80a4c1efe951aa776823557a3c49b8fcd62af49a14380a318818e3d0fddd214f
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\ca\messages.json
                                                  • Size 423B
                                                  • SHA256 f94aaf624b73b7969b44341b56e593ffa6deccd92169d1bac059000db337acac
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\cs\messages.json
                                                  • Size 407B
                                                  • SHA256 2819387ac23ec4550a3778be820522a7fbf0d36d4859c0c057eddb199e4e41d9
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\da\messages.json
                                                  • Size 393B
                                                  • SHA256 3f9a707d9d1489662efc26127b48b5eaf4df20e32b40b73d4a334b772f0c92c4
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\de\messages.json
                                                  • Size 425B
                                                  • SHA256 18093b5c5134109d7e7528fa6a92ed1adf36b351fc32f37158bc88064e541a0b
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\el\messages.json
                                                  • Size 624B
                                                  • SHA256 6f10347307c2d5c1fab911bc6ce07c6edea922bb0ec575cc908bdfd4accbec8d
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\fi\messages.json
                                                  • Size 412B
                                                  • SHA256 f886a0f236c6741488d6b001717f1b50dc36863365ee42692b3cf36abbc2334e
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\fil\messages.json
                                                  • Size 423B
                                                  • SHA256 2c5501932616f21b4523f18bbbffff896a16e993b2a482bb8a8961e8d15b20d4
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\fr\messages.json
                                                  • Size 435B
                                                  • SHA256 6c5b067f98cf71722061022118e825cb753050833c1079c06809c1eb92e68737
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\hi\messages.json
                                                  • Size 700B
                                                  • SHA256 7ef2c7ab8bb7f1fb2b52901fc7a7f0e09eac95a6ef1bfea818dace4484fdcba7
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\hr\messages.json
                                                  • Size 423B
                                                  • SHA256 00780fca6c30710c79858b69990c0f6dddc3b2d46cb759202ce66da11c85bb6b
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\hu\messages.json
                                                  • Size 440B
                                                  • SHA256 c5f9301cd0674e4a184436e5dc26879c980baf66bcf0c201b010e26325ea6e9b
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\id\messages.json
                                                  • Size 391B
                                                  • SHA256 14f3c6f716b3e99165d5388121f6ed901c1f5acb05420c1573c9e513769bd26b
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\it\messages.json
                                                  • Size 427B
                                                  • SHA256 50f996c101f2e54fe0f2c88172c259abe05b7705a7b13ff049fd807a4399bb23
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\ja\messages.json
                                                  • Size 504B
                                                  • SHA256 db19d6d58fb03ce604d9c0840c08707d3948e16682aee6312af2a39d954c7196
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\ko\messages.json
                                                  • Size 440B
                                                  • SHA256 00b0041d93c2f2760e964a70dc3dfbbe720a3f261bda6e5ff6f052106f4628ad
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\lt\messages.json
                                                  • Size 428B
                                                  • SHA256 2a53a1eb30e70423e4c146c3ffa96ead6d1f1b154059e8de7ec7a5960f2686d1
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\lv\messages.json
                                                  • Size 421B
                                                  • SHA256 3b37352b3d148d7295cc0a124da57f7dbac4e98c19c7f31dd8abf2d97726d886
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\ms\messages.json
                                                  • Size 401B
                                                  • SHA256 0def86e8de9487a64067843a8d672c027fa1b5c59e10cc60e0f08e2128dec96d
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\nl\messages.json
                                                  • Size 413B
                                                  • SHA256 07962fa5344089532f5eca07d17319610f18b573cf2a0dd24cdef3b3261e6477
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\no\messages.json
                                                  • Size 393B
                                                  • SHA256 d3c23b53ef4f66d8b8730a570135a9a17f1414a15386b0d007e77287ecb788f3
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\pl\messages.json
                                                  • Size 431B
                                                  • SHA256 8a5de8af653b76691d07c35ea43c4f30c144982db249f020627cb78d9a9ed4e8
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\pt_BR\messages.json
                                                  • Size 419B
                                                  • SHA256 b292fb9f8c4a8c733e033fb8f85cc940a8b34cfdc349e7e54a3b8ec13aeac253
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\pt_PT\messages.json
                                                  • Size 422B
                                                  • SHA256 3baf77d76ae8fbeba0ac863f8e22c7d22084cf254feea227f37736f7a142b068
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\ro\messages.json
                                                  • Size 433B
                                                  • SHA256 e090811708241a42ab71f0f2e5f94c5a0e55a5d38a9ccacf7e4bd33ed8865574
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\ru\messages.json
                                                  • Size 609B
                                                  • SHA256 85017824ddfefe0789b0480bced2ae1fe1876c01b3adf7d033a16c6407d90ed6
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\sk\messages.json
                                                  • Size 423B
                                                  • SHA256 5bf2b036a0036d4bcdcc414d82b33aa83163cb9c8341f884c2648d7fa8aa333a
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\sr\messages.json
                                                  • Size 578B
                                                  • SHA256 4f724533cdf53b2ed7d49f185a43aa18b34a14170e0d67ebd61d4e745491ea02
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\sv\messages.json
                                                  • Size 406B
                                                  • SHA256 9bdc0eb2048e133c2410e2352245c5232d85c85db94a9708e493000a02762d22
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\sw\messages.json
                                                  • Size 422B
                                                  • SHA256 d487bcbfe9f0b6f87617fa6c4db5829d2de348a56417cfdafe310e5cf358c53a
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\ta\messages.json
                                                  • Size 778B
                                                  • SHA256 22d933c85b88d6b20e6ae9347fff17114320cc47cb4a6231ad88aa71394f6011
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\te\messages.json
                                                  • Size 796B
                                                  • SHA256 40c84d74e36686384d7adec3363be5b0e5a87809acae39432eddfdbc62e7dbd4
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\th\messages.json
                                                  • Size 666B
                                                  • SHA256 b80044e94b480c10470c6edf5dd260bd46540493b526130d8b2a03ea8acab41f
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\tr\messages.json
                                                  • Size 422B
                                                  • SHA256 b262410f023e09dff8b4d81d074b091a73eb394a1db13f13f2878aa0b4f3fa38
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\uk\messages.json
                                                  • Size 571B
                                                  • SHA256 0bfcebd61e9aaafc456589ce18b73af1fb1d933406bb6f11e2f765c1e3d31f12
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\vi\messages.json
                                                  • Size 479B
                                                  • SHA256 879d1c47b51ea4bba46e72a57d129331ed3b71cb6a8d545fcf5ee73a2d240840
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\zh_CN\messages.json
                                                  • Size 379B
                                                  • SHA256 7fd0ceac426fbff6088de114f2e1a238f2d6842de027217525096c674cb17e72
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  messages.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\_locales\zh_TW\messages.json
                                                  • Size 379B
                                                  • SHA256 25f70a0f5f7f5267b0ee8cd52e233f4b69f82d9cb46a3dc24c169ce4627f5841
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  background.js
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\background.js
                                                  • Size 264B
                                                  • SHA256 1eed9d8fb6eb9f836709c8f0866ffa71fd5de7b9df7d1e8da1bb9c2011196e45
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  icon.png
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\icon.png
                                                  • Size 5KB
                                                  • SHA256 f355f2b3167c6c63bb570444d5e2db91f08a6903339a48f30e9d8eba233396e5
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  frag.wgsl
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\source\shaders\frag.wgsl
                                                  • Size 3KB
                                                  • SHA256 a02382715dd48479a3a25186bdf3ccd41279a8ee476d9071ba9212951933a3c4
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  vert.wgsl
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\source\shaders\vert.wgsl
                                                  • Size 332B
                                                  • SHA256 2cc3a249276241a39f3b82904d56a64ffa9b6eafb0b95385f5a2442f24ce15f7
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  mainTex.png
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\source\textures\mainTex.png
                                                  • Size 139KB
                                                  • SHA256 05e915df1184ec1e9f3e6dcb264d25095046b04bcbc8606b3bac61f8e826cb8f
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  secTex.png
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\source\textures\secTex.png
                                                  • Size 137KB
                                                  • SHA256 6a7c66eef9773ec113aca4d5cd64f3f3aa49d4c534dc14fa985d707396223f2e
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  preview.png
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6828_747129227\CRX_INSTALL\wallpaper\preview.png
                                                  • Size 464KB
                                                  • SHA256 c5a2b18b255c6a4029de97ef9d00af6e563b562a2abdbee1e934ff77d5a92c29
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  main.js
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.8_0\main.js
                                                  • Size 47KB
                                                  • SHA256 9cc5e1dd96d76735499257c52d632a0a9e17ed4da929035067dadcc586000335
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  logo_128.png
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\icons\logo_128.png
                                                  • Size 7KB
                                                  • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  logo_16.png
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\icons\logo_16.png
                                                  • Size 653B
                                                  • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  logo_32.png
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\icons\logo_32.png
                                                  • Size 1KB
                                                  • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  logo_48.png
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\icons\logo_48.png
                                                  • Size 2KB
                                                  • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  logo_64.png
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\icons\logo_64.png
                                                  • Size 2KB
                                                  • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  service-worker-loader.js
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\service-worker-loader.js
                                                  • Size 49B
                                                  • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  favicon_opera_one.png
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\favicon_opera_one.png
                                                  • Size 2KB
                                                  • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  background.js
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\background.js
                                                  • Size 87KB
                                                  • SHA256 b199d4f989c63947c53a9d07450038cfe274b7a10e8cc7d688c4049ae14ef63e
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Icon_Light_Neutral.png
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Neutral.png
                                                  • Size 2KB
                                                  • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  popup.js.LICENSE.txt
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\popup.js.LICENSE.txt
                                                  • Size 1KB
                                                  • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  rules.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\rules.json
                                                  • Size 839B
                                                  • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  077d94f5-9e24-4602-9b29-f792f2466c92.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\077d94f5-9e24-4602-9b29-f792f2466c92.tmp
                                                  • Size 27KB
                                                  • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  44e97a48-d0b4-4319-96a3-abf39fd8aaaf.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\44e97a48-d0b4-4319-96a3-abf39fd8aaaf.tmp
                                                  • Size 27KB
                                                  • SHA256 3c5dfa15d581def92644fe4db0be64e2884f7f7ad01ec81671acdd44c70efcd4
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  670b0d33-d667-4b17-ab31-8c7b4a2f17f4.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\670b0d33-d667-4b17-ab31-8c7b4a2f17f4.tmp
                                                  • Size 27KB
                                                  • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  6753a8f2-ec3f-4347-bd8a-53a434f0f3ad.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\6753a8f2-ec3f-4347-bd8a-53a434f0f3ad.tmp
                                                  • Size 27KB
                                                  • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  9e3072fd-58d0-4566-a74e-8737b6e1d96b.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\9e3072fd-58d0-4566-a74e-8737b6e1d96b.tmp
                                                  • Size 27KB
                                                  • SHA256 3a9c655a88437e331f50a23bb40cb1a3de86277cb1a9488c81c426598cfab0a3
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  cb6d92bf-63bf-44ab-9bff-252ace0d1a2a.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\cb6d92bf-63bf-44ab-9bff-252ace0d1a2a.tmp
                                                  • Size 27KB
                                                  • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Network Persistent State
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                  • Size 61B
                                                  • SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  Network Persistent State
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                  • Size 1KB
                                                  • SHA256 9b4f79422018b36cb259ba0352fba43a661995ed76ce66456fd5281b717e1b58
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  Network Persistent State447cc182-3c5c-48d6-98b0-e96acec43d90.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State447cc182-3c5c-48d6-98b0-e96acec43d90.tmp
                                                  • Size 111B
                                                  • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  SCT Auditing Pending Reports40b45bbd-e6c2-48dc-8a1c-32a00697da03.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\SCT Auditing Pending Reports40b45bbd-e6c2-48dc-8a1c-32a00697da03.tmp
                                                  • Size 2B
                                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  Preferences
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                  • Size 11KB
                                                  • SHA256 25be720f30b091b1ea489ab0e3619c20576442b811f9786369c8114840c0ac6b
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Preferences
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                  • Size 16KB
                                                  • SHA256 a1f5ec96c9bed30daa46d6f00340114b581fdfd088c21c45abf6d8c3f12fa841
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Preferences
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                  • Size 15KB
                                                  • SHA256 8a202b2488538990e9a74706af2f95b1c92c2a34673bbd2b01b82ca7116b2a61
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Preferences
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                  • Size 15KB
                                                  • SHA256 b07436b6f9203763a703a34c3d6f08cd8874bbd638bbd7659d5f3eb12b56cbe6
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Preferences6b139691-6e64-44c2-bf91-d55bb019e949.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences6b139691-6e64-44c2-bf91-d55bb019e949.tmp
                                                  • Size 10KB
                                                  • SHA256 5983e8bf8f8fd4218bc80a414eb25419eed03d8d1334b687741d43349522cad0
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Secure Preferences
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                  • Size 85KB
                                                  • SHA256 58ec5af2f66c329b8721d5799746bf16d8c98bdd81bdec05d78802aeb059c004
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Secure Preferences
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                  • Size 85KB
                                                  • SHA256 cc4f569426f5f5217a7c06aa5c2116e3427aaebd95070dca33535b057433f84e
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Secure Preferences
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                  • Size 112KB
                                                  • SHA256 ad31b2a31773ec56dd313ef62abaeee94b63268b7d7b4398781cd5ea7f2b5662
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  3e5d3b9f-4c0a-4f4d-adde-611a7b70bfbb.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\3e5d3b9f-4c0a-4f4d-adde-611a7b70bfbb.tmp
                                                  • Size 144B
                                                  • SHA256 21af4e807863f692e70b1b7a8539b0446e884d0d3d1620beda985104b73de973
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  454e02d9-9456-4a4e-ac2b-795ddd51ef02.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\454e02d9-9456-4a4e-ac2b-795ddd51ef02.tmp
                                                  • Size 72B
                                                  • SHA256 6056dab7f85ea402352bbd9bb8f425bb63195c6753e7ead72bbea9fc691709d5
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  the-real-index
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                  • Size 360B
                                                  • SHA256 5afd1f8898f01a8cfaa4b7c472fe58cebe00e5f4a248cdbb75fa9d8f2cfd82f6
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  the-real-index
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                  • Size 120B
                                                  • SHA256 1dfbdfa5e027f4048e3d0140d20c7c2b83d8faf0e282232f77f6b19e117c3c7b
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  the-real-index
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                  • Size 216B
                                                  • SHA256 ef91ee4b22be407d4419e117f5b885096d03315a03d75f30ba0e9afec0514909
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  0591db74-ed01-4ec4-9941-fda9e3cd58ac.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\0591db74-ed01-4ec4-9941-fda9e3cd58ac.tmp
                                                  • Size 381B
                                                  • SHA256 6ff7e580d2c0b6bb711bfc592e7836cbf438b5542a68c3951b6d984fa6a816d2
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  a93f9c5d-122f-4ff0-bee6-4919ee0d70e9.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\a93f9c5d-122f-4ff0-bee6-4919ee0d70e9.tmp
                                                  • Size 381B
                                                  • SHA256 d6567fc3355beff5623c41bd827542a8b8582f478f11123482666da91fbb2ae9
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  cc08b48e-9b51-4f26-9171-9c8bd484e146.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\cc08b48e-9b51-4f26-9171-9c8bd484e146.tmp
                                                  • Size 381B
                                                  • SHA256 6397e491d24962bb0cbc6e5495d3d2d1845bcc4e106b20c71b2f4dea725b00b7
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 11KB
                                                  • SHA256 9de13598605fe5f5d1f035f851f094a17f62a46144e7c95d3a32b69f63bfb8c9
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 11KB
                                                  • SHA256 2d2b20761061806dd2cbf884c63f80860d3e95b1322ba92836c221f88fb933e7
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 493B
                                                  • SHA256 b4524095a0403645398372d9f7c5eacf02af713b44f7ab24be700e77bb3163a5
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 1KB
                                                  • SHA256 153d0b40f0327b455760d2f9198d9dca484e0bbe166b2f5d23660726a6caba87
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 1KB
                                                  • SHA256 f4e9e7ea5135195ec579ce6eea2e9bb408d994acdb335da78eb5a4b7d3aa92a6
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 9KB
                                                  • SHA256 9daf341b0e4234cff4ddce8fb98476d636285c422b74ccf712f2c25fde94ee56
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 9KB
                                                  • SHA256 a535e5805bd3b49fba458cee6bf271f7daa4a3c7dfcc8534c4109cc035ff1f4a
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 9KB
                                                  • SHA256 2c0318e61e0bd973c23d3e39e6debe2038cdaf82381d3c8d715d4457f0bd99f6
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 9KB
                                                  • SHA256 fc1075b905341fbdbc3879b400bb9d655f2b9e01995a61010e68796eb03e7df1
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 9KB
                                                  • SHA256 8a3054411282a60ea1758c237b151ae4f99015d905568a41bf036abee087a92d
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 9KB
                                                  • SHA256 8afb765bc583b2f01bfe80c6689342c28d90a0544aa32aae55f2bf70ba2e1b79
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 10KB
                                                  • SHA256 55ed6c2e7b1ea543d26e8031c639e15affc2ff43d05d479362a4cd7d80803302
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 10KB
                                                  • SHA256 aa4bf51fc7ce0b4b07e4ae05bb1b91ee8908a1f3d9bc285bf8a7bbdcbc2dc890
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 10KB
                                                  • SHA256 59f323dbdea4f7e528b66a2bf54a2c8fc58c62d605eb5323f51953d46c7b2c8a
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 11KB
                                                  • SHA256 ef58bf13e3a3ed5aefaa0b8108715e2652e045c6e4f8a80f8cb4e4485ff7649c
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 11KB
                                                  • SHA256 b5c2e0e853fb17062b116d23ac63ba2b6a9b3418be78bd27f2ced1f24bfb3b52
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 621B
                                                  • SHA256 a9d3b2cabf4948d6b3596f09b520064e1445f48f5cd4368bd9bf8dfc3078f0a9
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 8KB
                                                  • SHA256 9de50f24acafbd09c3e833b2f237d7ea5ce4d6f403bdf339c2af46a0c16635b1
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 7KB
                                                  • SHA256 86e16f138895fe6829b8d01324564d056579e8e19beae8d358b49a0f0232a03c
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 7KB
                                                  • SHA256 1e7f7c0c74d646a2cd03b35dcc19ccf8123c564c3def3e748198bc60cefed44b
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 9KB
                                                  • SHA256 432e05159c721cfe76fe7404a8a4cebabd037abdc0c83a0d35149510485f592d
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 9KB
                                                  • SHA256 361d0f0b54195b0dae663151972b9b73cfa0242605664602e632f39079ba4fb0
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 9KB
                                                  • SHA256 ac97030be205496dc777ef1942b01dbfcfb4ca6d77119add0ebb39d779a3457c
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 9KB
                                                  • SHA256 768534e77c92eee04c9400c39b06c2af0bcb3da405be75b93bfdb2bce30dbe41
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 9KB
                                                  • SHA256 28d2f80c852152812075ba6f3ce88fc048e77a800320f269e99b76e9b3f482b9
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 9KB
                                                  • SHA256 57912ab21ea98afd7dbc5740b0a4c0431f36e65af80f1a76545dd2a19a5d0cc7
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 9KB
                                                  • SHA256 35bdd75544194f166ec56850f9336f707d25d262de6800be0d1056818992130a
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 9KB
                                                  • SHA256 07d0fc5ce3a09acd69c3fdfacb49b930f46ea71dcb6430566c6fa527d1dd9eaf
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 9KB
                                                  • SHA256 e52c1a53903670692c23caabe091d0d4f30dbd92035f6f6b190ee3238ff037ea
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 9KB
                                                  • SHA256 1255d5a4e63b84a80ddb5f056d83ee1e196b86702cc77a2f5a1390fe00612feb
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 10KB
                                                  • SHA256 9d7d71d013802113cc747cf92b3214522d5c5d6a0a9ba7fab39e28ffe1ed87d4
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 11KB
                                                  • SHA256 cc378bffeb029176774e15399fb315c186171f95350f56826d7ab1d1efd57e25
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 11KB
                                                  • SHA256 de9c7c36584b35608da388ba8f7f14dbe1dab6da95b3cba112e6b368fa326ff5
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 2KB
                                                  • SHA256 3a9eac0f66ea888758f5ac11922daaef781a4793ca49465f901abbc6bfcc27b5
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 10KB
                                                  • SHA256 d10cd65e00624c3ab00aff056f996e6dacf81d294cf319d58c7be74841a6e0f9
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 1KB
                                                  • SHA256 74ccb7ee866d76fe15d35916a433a766ce9953503f68d4c8b7d206628c3ca3c1
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 1KB
                                                  • SHA256 685bca2886a7d68febb4ab30fbe0ce400aa604e8fc81923d4929670282efdacb
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 10KB
                                                  • SHA256 aab2d2981e61e7937cc0eb21dc6fd0d0ff99aa8cd62d6e0ab7f6e59d536f418b
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 9KB
                                                  • SHA256 82263a82b12a2d55bfd73ee9b788f1d28c88f625a55771eed2a7e560adee57a6
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 9KB
                                                  • SHA256 43389c7dae672eb57fe3409d9d2c019d87eed6499f35b04b8685e1454a56e6c4
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 925B
                                                  • SHA256 462efd2fe55eaae64417267be636039192354dc84e0fa9f2903e1e7c9d3fdf8b
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 7KB
                                                  • SHA256 2b4d4afc273ab0b4f99ad828ecf4a35a48cc9ad4caf6b1d9be0b4837f04a5b36
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 9KB
                                                  • SHA256 9f765652a0086a7d202f424566543003232b4e4579a9340621207438443b0aa8
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 9KB
                                                  • SHA256 66365e6321723730647dd3ace1b924c5ca75a7ca3ba8ddbed9cf867e689e1cce
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 973B
                                                  • SHA256 39c2c9ded5a1788d49cf3d0fdc5d784921dd64caef5588727096ea365e023cb9
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 1KB
                                                  • SHA256 f11710e9d222f6ec338b15f07151778cb9f610e1b02a347792a0630b80168f49
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 1KB
                                                  • SHA256 311782b015206dd6d8226759e8c74d3ec684620c349a8833a8a41ce384a8aad9
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 10KB
                                                  • SHA256 3fc0b39d322faf9530798f7be24c673283bdcfff3a86bed6db91a17817dcbcfc
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 8KB
                                                  • SHA256 428642afb81f80f90b8b05c7ab2e0d87b45a202094f7d5bd45ac05c940735000
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 7KB
                                                  • SHA256 23444368134196dfb76ab7cb557e460bb687b67453689e2d8b6615d2139847a6
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 1KB
                                                  • SHA256 734f5ec38b5bf8c1201cc04e2fe0dde2ca797c1e7d7eb746e7045544f9f4e789
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 7KB
                                                  • SHA256 5e5d7e9498b4890cf30e62827e661c84bc80ad026e4db3d3e1d17f34447c968a
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 10KB
                                                  • SHA256 4cddb4cffb3a0968328f05fb6198bf8ab65e8c2e8b6eadb05a6ad4ede41e64a9
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 749B
                                                  • SHA256 c518a8183f2a543185e117f3729c24639fde6bfc863ed1a2b781ad9222d3577a
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 8KB
                                                  • SHA256 9eed1e1596cafa6ba2b22f967405027fa1b168965371afb80f12de5670131a44
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 6KB
                                                  • SHA256 42401782db323109710adaf1de5bcaa4cc0a48cb50d7a3109dcd194e2cb7a33a
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 9KB
                                                  • SHA256 2526b1819cf950b62c3d9386419cab62759a46ca7c96c5c8be63a8a5875dd50f
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 1KB
                                                  • SHA256 632960421e2ef3ee879aa2f94692067ce1a36e0c2ee480679169146e5e3ac47f
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw
                                                  • Size 10KB
                                                  • SHA256 e97b165ecfc383763eb8a70d0e5bd410b0ff5c25b81e50dde6afc664bd8d318f
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw09fcbdc3-1b9e-4cc4-9895-f3805eb51bd6.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.raw09fcbdc3-1b9e-4cc4-9895-f3805eb51bd6.tmp
                                                  • Size 8KB
                                                  • SHA256 dfc91c2af0654babebdbe91f53e0353b8cedbace0965963a7d55cfe86d1f7bd0
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.rawafbd6083-f246-4de8-acbd-1972d3976707.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.rawafbd6083-f246-4de8-acbd-1972d3976707.tmp
                                                  • Size 1KB
                                                  • SHA256 90be041a0428cb94e091eaf9ac30896b9ff48f54f0e6b5dceaae17103605a8e3
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.rawd798b015-1b8b-4a4d-8703-10e924dfb895.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_bf80a8d9-5e50-435d-ba4f-ca07b94b743f.rawd798b015-1b8b-4a4d-8703-10e924dfb895.tmp
                                                  • Size 11KB
                                                  • SHA256 473e62efd9a2ce02b2607a1243a6009f31f40d63d4e6e675823e475cad64d8ae
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_e5b58974-9760-4870-8872-80fde5d217f1.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_e5b58974-9760-4870-8872-80fde5d217f1.raw
                                                  • Size 493B
                                                  • SHA256 fd7edb286e960a400bd3127b168fb29533c47cc7b2da2659674dc6ddfb63378e
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_e5b58974-9760-4870-8872-80fde5d217f1.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_e5b58974-9760-4870-8872-80fde5d217f1.raw
                                                  • Size 621B
                                                  • SHA256 1dde9bb458a4410ddb53ee4a8fa7ceb3ef7c6f26572d01aef0d499b428a9a1f3
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_e5b58974-9760-4870-8872-80fde5d217f1.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_e5b58974-9760-4870-8872-80fde5d217f1.raw
                                                  • Size 637B
                                                  • SHA256 a9a0a2974691440613cd6f35a22afe976d17f3971fc3f569ff24818b872649ae
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_e5b58974-9760-4870-8872-80fde5d217f1.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_e5b58974-9760-4870-8872-80fde5d217f1.raw
                                                  • Size 637B
                                                  • SHA256 4f0e952e7834e7023f416d03cda35e044cb40d9ac406a1eae0c295b777ea89f8
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_e5b58974-9760-4870-8872-80fde5d217f1.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_e5b58974-9760-4870-8872-80fde5d217f1.raw
                                                  • Size 637B
                                                  • SHA256 c8b5f0da2f2d5da42fac9de1e7316e6628ca5ff6d26378c3f8266bb2ac47434e
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_e5b58974-9760-4870-8872-80fde5d217f1.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_e5b58974-9760-4870-8872-80fde5d217f1.raw
                                                  • Size 845B
                                                  • SHA256 388f7f31da6e15f6691c987b13ec1235eea684a47f3383a7d5edbe465f36e5ef
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_e5b58974-9760-4870-8872-80fde5d217f1.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_e5b58974-9760-4870-8872-80fde5d217f1.raw
                                                  • Size 797B
                                                  • SHA256 0ea559abdafb992b26f66810b7cf87cafb346e452a6515c086a8ccc075ecc9a2
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_f24f045b-a3bc-4aa6-8981-8438fa513a59.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f24f045b-a3bc-4aa6-8981-8438fa513a59.raw
                                                  • Size 797B
                                                  • SHA256 f5d44e704f54ba8f33a0a0e695965cd45449f8d5b11001fb7caa3f8ab8f75df2
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_f24f045b-a3bc-4aa6-8981-8438fa513a59.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f24f045b-a3bc-4aa6-8981-8438fa513a59.raw
                                                  • Size 925B
                                                  • SHA256 92604b10aed3326661d5170d6ad76ba74e3956e4ea86b0c0181b76ba0650be1b
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_f24f045b-a3bc-4aa6-8981-8438fa513a59.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f24f045b-a3bc-4aa6-8981-8438fa513a59.raw
                                                  • Size 1KB
                                                  • SHA256 7ab6cb1903bda2066818f70fadc04f749636b538a8d53e0181263135241e5ffe
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_f24f045b-a3bc-4aa6-8981-8438fa513a59.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f24f045b-a3bc-4aa6-8981-8438fa513a59.raw
                                                  • Size 1KB
                                                  • SHA256 6541c30ea7fb03e62b731c8e4bf744d24598dc933ad5394865b409a3a2337248
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_f24f045b-a3bc-4aa6-8981-8438fa513a59.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f24f045b-a3bc-4aa6-8981-8438fa513a59.raw
                                                  • Size 781B
                                                  • SHA256 e429c722ad9a663b0bebec4747d71ba14fb04fef8d5afaca54ff7826d532f8cc
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_f24f045b-a3bc-4aa6-8981-8438fa513a59.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f24f045b-a3bc-4aa6-8981-8438fa513a59.raw
                                                  • Size 493B
                                                  • SHA256 96bcb2f5ce6418762c3834cccc7c5fdba8ae018048dd9963f0f7ab70aa8b6dd6
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_f24f045b-a3bc-4aa6-8981-8438fa513a59.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f24f045b-a3bc-4aa6-8981-8438fa513a59.raw
                                                  • Size 605B
                                                  • SHA256 5cf55e9b1e8f4bbedf263644b16bddf7ca1ae8d81746182a20a6fd09a24442ac
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_f24f045b-a3bc-4aa6-8981-8438fa513a59.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f24f045b-a3bc-4aa6-8981-8438fa513a59.raw
                                                  • Size 765B
                                                  • SHA256 74802efe757b93b837fca26613ba7df5540dbff55d7fe6b8be1527922df150b3
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_f24f045b-a3bc-4aa6-8981-8438fa513a59.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f24f045b-a3bc-4aa6-8981-8438fa513a59.raw
                                                  • Size 1KB
                                                  • SHA256 6b12c55016fdcab41808c41e384a02299cc5677c070d707fd47dfa0da7e8b6e3
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_f24f045b-a3bc-4aa6-8981-8438fa513a59.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f24f045b-a3bc-4aa6-8981-8438fa513a59.raw
                                                  • Size 1KB
                                                  • SHA256 7adca82e2609bc729b323e8fd490ec2013d369ad882262a8314f4768e140b794
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_f24f045b-a3bc-4aa6-8981-8438fa513a59.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f24f045b-a3bc-4aa6-8981-8438fa513a59.raw
                                                  • Size 1KB
                                                  • SHA256 d7aefd44d6734937e69c33945396b736ef0ed9bd6fb934a874cd4e6fd7bfa29c
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  a75ffde7-3da5-42d8-9077-4b41f9a7e3b6.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\a75ffde7-3da5-42d8-9077-4b41f9a7e3b6.tmp
                                                  • Size 203B
                                                  • SHA256 b832c20e44851bdb228e71cfeb8dd7490419ad08c873f77c85b862d4f5f2bda9
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp3856.0.1540936932
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3856.0.1540936932
                                                  • Size 1KB
                                                  • SHA256 e4f049c52f7c1da9dcc42724559cd7659ba091c7828335b4e2a0ff517faa6d33
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp3856.0.1540936932
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3856.0.1540936932
                                                  • Size 265B
                                                  • SHA256 46caa7dc8ffe24957d1494673ef8214a2455485bcf8299c322d7b227893b30d6
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp3856.0.1540936932
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3856.0.1540936932
                                                  • Size 2KB
                                                  • SHA256 0fefec1494d8b5ce1ecdc1755baa0e83117f1482e1f2396ece0483bdffe22180
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.0.1328382744
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.0.1328382744
                                                  • Size 823B
                                                  • SHA256 f7447984adda16f717cf582e78d1da99e7cbbc68bae898d3d03eba8c0e429a5b
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.0.1328382744
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.0.1328382744
                                                  • Size 1KB
                                                  • SHA256 7532042f87a62a690be6aeeb1fa76413be8c75b079f2a183cd8ee518a4e01714
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.0.1328382744
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.0.1328382744
                                                  • Size 1KB
                                                  • SHA256 7cafb4f8482f4c6ed0ae8a679df96635b5cd977227d21d16b9ac1840967f518b
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.0.1328382744
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.0.1328382744
                                                  • Size 1KB
                                                  • SHA256 9f2038c055b1445d33e7a5d763f5092b2d094608f90d114341ffc93f43b20e92
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.0.1328382744
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.0.1328382744
                                                  • Size 1KB
                                                  • SHA256 2cb5a639d1e1364e6f5e2c154ef02a6e34f15310b772cfb5a9309edbbc27caa2
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.0.1328382744
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.0.1328382744
                                                  • Size 2KB
                                                  • SHA256 0db6951969ae8d717e72571df50a016c04e3a6e235bfdd2efde3e18372fb5a50
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.0.1328382744
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.0.1328382744
                                                  • Size 3KB
                                                  • SHA256 6cb27f25dcd37de822c8fa09de41a4bfc342a6eb48a4d9db0b34858133a55231
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.0.1328382744
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.0.1328382744
                                                  • Size 3KB
                                                  • SHA256 3e4abb6ec9afa3c58958943ad24038518e5b6498d67a276809a72360a6a58d82
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.0.1328382744
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.0.1328382744
                                                  • Size 3KB
                                                  • SHA256 124be9f8be7ab9acd419a459d2924ab4c64066e3ccedacfed7b71badc076249b
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.0.1328382744
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.0.1328382744
                                                  • Size 3KB
                                                  • SHA256 9f752c041451a1c77a4b988c134c650727da0550e8b0e5f818bd1c6c25ea5dfc
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.0.1328382744
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.0.1328382744
                                                  • Size 3KB
                                                  • SHA256 6f37cdf69c52bc4761274bf2fac128a9701d5f7ef219e645450baccd97dac2d1
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.0.1328382744
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.0.1328382744
                                                  • Size 3KB
                                                  • SHA256 981dc9e3743e194d8fbbea2cf3f1ed4c2d00ff3f943178a97bb6dff054be8365
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.0.1328382744
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.0.1328382744
                                                  • Size 3KB
                                                  • SHA256 033e4f0bc4fe0996b7cbf2279a4fa57398c611d8640e830142edb80597eeeb46
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.0.1328382744
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.0.1328382744
                                                  • Size 4KB
                                                  • SHA256 6a95d7e41e2678e0a8d36edceb7ca5d572ae6a9eb10210818db5bb5125c96c0e
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  ssdfp6704.0.1328382744
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.0.1328382744
                                                  • Size 737B
                                                  • SHA256 e8c881078901be4cec902e0d0db7a8bb38d06bd3cd383b8039006527e9b0ebd8
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.0.1328382744
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.0.1328382744
                                                  • Size 1KB
                                                  • SHA256 036fc0897f9b57aedaeb6cc138ab874a75e9710b40ca2356f69d6ef8c7ffd2da
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.0.1328382744
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.0.1328382744
                                                  • Size 1013B
                                                  • SHA256 196772e15df1ea22b72cb8e4e9a8b4aee39f36d1f0acad3d31f88f7a5d13c165
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.0.1328382744
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.0.1328382744
                                                  • Size 1KB
                                                  • SHA256 12275d09fa06e482804478a628fd68c4803cb354904b55a9a0c18663c0541359
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.0.1328382744
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.0.1328382744
                                                  • Size 1KB
                                                  • SHA256 d8a4fa335a2240a252feb163c3a320cf93c59a603fd7b021103ade757d38d2e7
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.0.1328382744
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.0.1328382744
                                                  • Size 647B
                                                  • SHA256 927d107f8dfbb25d07c6d6b32dbdda38d8bce7e9b2d20eaa3de3f89286f350d1
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.0.1328382744
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.0.1328382744
                                                  • Size 917B
                                                  • SHA256 8888da95e21cb6cf670660b6bdc68e8e05afa64dded9872a2245ebb21fc8b131
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.0.1328382744
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.0.1328382744
                                                  • Size 549B
                                                  • SHA256 0088fd07f300624a4c42b62cbdbc478dd54ff0a975ceabf294167687e24fcd54
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.1.879687929
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.1.879687929
                                                  • Size 200B
                                                  • SHA256 6e2a69b36e7d45afd72efe7dc56eee034686b5a54a83a52b31ef6efb0754b584
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.1.879687929
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.1.879687929
                                                  • Size 224B
                                                  • SHA256 387f2ad7267a23b9d4b3fb5a924bc1bc1552e4323a1139e827d7c684d8bd555d
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6704.1.879687929
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6704.1.879687929
                                                  • Size 224B
                                                  • SHA256 81b15f06a17bb894a5dfa404e753d4a9bbd332f1d7bcd52ef2cf75cf4934a0d8
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6828.0.1154059290
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6828.0.1154059290
                                                  • Size 265B
                                                  • SHA256 d7a5391d5894c5b1f336d31a396924918fb66554aa95f13d8b5977de7fa63e90
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6828.0.1154059290
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6828.0.1154059290
                                                  • Size 2KB
                                                  • SHA256 01cdfe9ffb789cd6ada21bb5d8b8319b3cc182cce0bceede22819013e861b34d
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp6828.0.1154059290
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6828.0.1154059290
                                                  • Size 1KB
                                                  • SHA256 f6ce680ff5edec94cb9714438ec7dc08c9387ec49d3817c3fb754c536cbd9a73
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  suggestions_cache.jsonaabcab4a-ce5e-451e-98ec-4360a8f8ddf0.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.jsonaabcab4a-ce5e-451e-98ec-4360a8f8ddf0.tmp
                                                  • Size 652KB
                                                  • SHA256 9f93aba6d3b2d74c5dca49e7b4ba17ed44e832d5fa53148fb89a9e400eecb002
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  data_0
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_0
                                                  • Size 8KB
                                                  • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                  • MD5 SHA1 SHA512 SSDEEP
                                                  Submit Download

                                                  data_1
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
                                                  • Size 264KB
                                                  • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                  • MD5 SHA1 SHA512 SSDEEP
                                                  Submit Download

                                                  data_2
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_2
                                                  • Size 8KB
                                                  • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                  • MD5 SHA1 SHA512 SSDEEP
                                                  Submit Download

                                                  data_3
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_3
                                                  • Size 8KB
                                                  • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                  • MD5 SHA1 SHA512 SSDEEP
                                                  Submit Download

                                                  Local State
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                  • Size 5KB
                                                  • SHA256 75b7a016aa6a0b920c1d1cceda3f7003bcbe757246532256941804ca6c6243d8
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Local State
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                  • Size 2KB
                                                  • SHA256 3d6594ffa7ccec042a2eb5d3af9112a67d81e446c1ee129ab0ddac2b2e8dad0f
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  Local State
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                  • Size 5KB
                                                  • SHA256 c57e044d1c427ddd17c3e1b8d7233d5b067d1871a3c64da654a3cf4c679d04f8
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Local State
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                  • Size 3KB
                                                  • SHA256 a0eee8cc0cb01baa8e493c0f61ea794a4a5b51797f461876357b3ba16f4783f3
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  preloaded_data.pb
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\MEIPreload\1.1.0.3\preloaded_data.pb
                                                  • Size 8KB
                                                  • SHA256 9b32ba9222d44bebc479ffa9704d2a9abccae153982838a3b9a79846b80877a3
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  VariationsSeedV2
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                  • Size 11B
                                                  • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  VariationsSeedV2
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                  • Size 19B
                                                  • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  metadata.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                  • Size 124B
                                                  • SHA256 42dc5689279765d5204eae760cb625510863a8cec862a2375f042ad1b5819351
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  metadata.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                  • Size 13B
                                                  • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  memory/5500-2308-0x000001B089A20000-0x000001B08B2BA000-memory.dmp
                                                  Download

                                                  memory/5620-513-0x00007FFBFCF00000-0x00007FFBFCF01000-memory.dmp
                                                  Download

                                                  memory/5620-514-0x00007FFBFC720000-0x00007FFBFC721000-memory.dmp
                                                  Download

                                                  memory/6476-4492-0x00000288BEB60000-0x00000288C03FA000-memory.dmp
                                                  Download

                                                  memory/6476-3967-0x00000288BEB60000-0x00000288C03FA000-memory.dmp
                                                  Download

                                                  memory/6648-3117-0x000001F5862F0000-0x000001F587B8A000-memory.dmp
                                                  Download