Overview

overview

8

Static

static

8

OperaInstaller.exe

windows10-2004-x64

8

OperaInstaller.exe

windows11-ltsc_2024-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    202s
  • max time network
    214s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    29/09/2026, 15:09

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaInstaller.exe
  • Size 178KB
  • Sample260929-sjvxfsshke
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealer

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Writes a Windows system DLL name to a user directory 2 TTPs 2 IoCs

    A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

    defense_evasion
  • Adds Run key to start application 2 TTPs 4 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Service Discovery 1 TTPs 1 IoCs

    Attempt to gather information on host's network.

    discovery
  • Drops file in Windows directory 15 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 22 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 7 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 59 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 23 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 10 IoCs
  • Suspicious use of SendNotifyMessage 6 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe"
    1⤵
    • Downloads MZ/PE file
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3356
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:5456
      • C:\Users\Admin\AppData\Local\Temp\7zS055B1579\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS055B1579\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=MzRjNGVmYTU4YjRhYWVhYjRiNDkxY2RiMTg5MmJlZmNhNGE4ZmYyMjY4MzA3NDc3ZjdjNGI5MzhlMGViZGNhNDp7ImNvdW50cnkiOiJHQiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijoib3BlcmEiLCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fc291cmNlPXdyayZ1dG1fbWVkaXVtPXBiJnV0bV9jYW1wYWlnbj1zcG90aWZ5X29wZXJhJnV0bV9jb250ZW50PTYxMjYzNCIsInRpbWVzdGFtcCI6IjE3OTA2OTQ2NDEuNzYwMiIsInVzZXJhZ2VudCI6Ik9wZXJhIEluc3RhbGxlci8xLjAiLCJ1dG0iOnsiY2FtcGFpZ24iOiJzcG90aWZ5X29wZXJhIiwiY29udGVudCI6IjYxMjYzNCIsIm1lZGl1bSI6InBiIiwic291cmNlIjoid3JrIn0sInV1aWQiOiJhYjRkNzFkZC0wN2RlLTRmNWItYWMxZC04NzNiMjUwOWMyMWEifQ==
        3⤵
        • Downloads MZ/PE file
        • Executes dropped EXE
        • Enumerates connected drives
        • Reads the TCP/IP host and domain name from the registry
        • Suspicious use of WriteProcessMemory
        PID:1620
        • C:\Users\Admin\AppData\Local\Temp\7zS055B1579\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS055B1579\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2b8,0x2bc,0x2c0,0x28c,0x2c8,0x7ff62cd56998,0x7ff62cd569a8,0x7ff62cd569b8
          4⤵
          • Executes dropped EXE
          PID:6136
        • C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:5080
        • C:\Users\Admin\AppData\Local\Temp\7zS055B1579\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zS055B1579\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=1620 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\opera_package_20260929161044" --session-guid=9cb48b31-a5fc-49e5-925d-e4e557866b0c --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=8408000000000000
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Suspicious use of WriteProcessMemory
          PID:3220
          • C:\Users\Admin\AppData\Local\Temp\7zS055B1579\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zS055B1579\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2c4,0x7ff62cd56998,0x7ff62cd569a8,0x7ff62cd569b8
            5⤵
            • Executes dropped EXE
            PID:5448
          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe" --backend --initial-pid=1620 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\opera_package_202609291610441" --session-guid=9cb48b31-a5fc-49e5-925d-e4e557866b0c --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=136.0.6008.52
            5⤵
            • Executes dropped EXE
            • Enumerates connected drives
            • Modifies registry class
            • Suspicious use of WriteProcessMemory
            PID:4600
            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff7cef16998,0x7ff7cef169a8,0x7ff7cef169b8
              6⤵
              • Executes dropped EXE
              PID:2524
            • C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\opera_package_202609291610441\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\opera_package_202609291610441\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Writes a Windows system DLL name to a user directory
              • Adds Run key to start application
              • System Location Discovery: System Language Discovery
              • Enumerates system info in registry
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:2732
              • C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\opera_package_202609291610441\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\opera_package_202609291610441\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x66c9cc,0x66c9d8,0x66c9e4
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:4316
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:1256
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xa2c9cc,0xa2c9d8,0xa2c9e4
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:4564
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Reads the TCP/IP host and domain name from the registry
                  • System Location Discovery: System Language Discovery
                  • Enumerates system info in registry
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:4668
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:1232
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7fff50f35d30,0x7fff50f35d40,0x7fff50f35d50
                      10⤵
                      • Executes dropped EXE
                      PID:3380
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:812
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7fff50f35d30,0x7fff50f35d40,0x7fff50f35d50
                      10⤵
                      • Executes dropped EXE
                      PID:5200
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2cc,0x2d0,0x2d4,0x2a8,0x288,0x957324,0x957330,0x95733c
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:3096
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:4344
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7fff50f35d30,0x7fff50f35d40,0x7fff50f35d50
                        11⤵
                        • Executes dropped EXE
                        PID:5856
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:916
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x27c,0x280,0x284,0x278,0x288,0x7fff50f35d30,0x7fff50f35d40,0x7fff50f35d50
                        11⤵
                        • Executes dropped EXE
                        PID:1180
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:2908
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7fff50f35d30,0x7fff50f35d40,0x7fff50f35d50
                        11⤵
                        • Executes dropped EXE
                        PID:2208
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\opera_package_202609291610441\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:2716
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7fff50f35d30,0x7fff50f35d40,0x7fff50f35d50
                7⤵
                • Executes dropped EXE
                PID:5424
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2016,i,8736705063669433520,12846845002903907347,524288 --field-trial-handle=1936,i,10113044489827031616,500406017459327120,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1940,i,10925557686079795288,1591050822793148083,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2252 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                PID:3124
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1716,i,7583569591226571592,16591852495332369970,262144 --field-trial-handle=1936,i,10113044489827031616,500406017459327120,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1940,i,10925557686079795288,1591050822793148083,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1892 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:1288
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2548,i,8519923464153549311,6316191443978835244,524288 --field-trial-handle=1936,i,10113044489827031616,500406017459327120,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1940,i,10925557686079795288,1591050822793148083,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2568 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5376
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3940,i,13952465161135219503,101341912852639712,2097152 --field-trial-handle=1936,i,10113044489827031616,500406017459327120,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1940,i,10925557686079795288,1591050822793148083,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3960 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:244
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4200,i,14812082842997054160,1677658346197014631,524288 --field-trial-handle=1936,i,10113044489827031616,500406017459327120,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1940,i,10925557686079795288,1591050822793148083,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4292 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5976
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4388,i,10782427891551404446,7044952757945600368,2097152 --field-trial-handle=1936,i,10113044489827031616,500406017459327120,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1940,i,10925557686079795288,1591050822793148083,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4448 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:1684
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4816,i,7930715469472994926,12088127243777854613,524288 --field-trial-handle=1936,i,10113044489827031616,500406017459327120,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1940,i,10925557686079795288,1591050822793148083,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4824 /prefetch:12
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4448
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1900,i,10234767936191891515,17669561317755088894,524288 --field-trial-handle=1936,i,10113044489827031616,500406017459327120,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1940,i,10925557686079795288,1591050822793148083,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=1896 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4556
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4012,i,16910336561796847747,8504493683522661302,524288 --field-trial-handle=1936,i,10113044489827031616,500406017459327120,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1940,i,10925557686079795288,1591050822793148083,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5200 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6476
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\opera_package_202609291610441\additional_file2.tmp"
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:6612
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7fff50f35d30,0x7fff50f35d40,0x7fff50f35d50
                7⤵
                • Executes dropped EXE
                PID:6632
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1872,i,6221370837907893222,15140402160523058310,524288 --field-trial-handle=2076,i,10784666222466063028,4323975688062013158,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2080,i,11940873709643076276,10355824307923986974,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2120 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                PID:6852
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1652,i,13132803924676609248,16868577602822964651,262144 --field-trial-handle=2076,i,10784666222466063028,4323975688062013158,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2080,i,11940873709643076276,10355824307923986974,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1980 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6824
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2488,i,14957456612076061393,7884289503030110352,524288 --field-trial-handle=2076,i,10784666222466063028,4323975688062013158,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2080,i,11940873709643076276,10355824307923986974,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2712 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6916
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3920,i,974724225241298965,1211747845003899708,2097152 --field-trial-handle=2076,i,10784666222466063028,4323975688062013158,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2080,i,11940873709643076276,10355824307923986974,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3976 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6172
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3996,i,1610263739868421516,3364226453096978138,524288 --field-trial-handle=2076,i,10784666222466063028,4323975688062013158,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2080,i,11940873709643076276,10355824307923986974,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4000 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6200
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4180,i,13068933078063298754,1274229986961670931,2097152 --field-trial-handle=2076,i,10784666222466063028,4323975688062013158,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2080,i,11940873709643076276,10355824307923986974,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4248 /prefetch:9
                7⤵
                • Executes dropped EXE
                PID:6220
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4276,i,16019607228969474649,16451415351982383084,2097152 --field-trial-handle=2076,i,10784666222466063028,4323975688062013158,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2080,i,11940873709643076276,10355824307923986974,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4324 /prefetch:9
                7⤵
                • Executes dropped EXE
                PID:6240
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4264,i,9785042602679925835,9017094345757958390,524288 --field-trial-handle=2076,i,10784666222466063028,4323975688062013158,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2080,i,11940873709643076276,10355824307923986974,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4992 /prefetch:12
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:5772
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3868,i,14291602570793722789,5641260875700978511,524288 --field-trial-handle=2076,i,10784666222466063028,4323975688062013158,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2080,i,11940873709643076276,10355824307923986974,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4708 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:2528
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5256,i,15326336688290610036,9173510361904308726,524288 --field-trial-handle=2076,i,10784666222466063028,4323975688062013158,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2080,i,11940873709643076276,10355824307923986974,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4852 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:3592
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
              6⤵
              • Executes dropped EXE
              • Adds Run key to start application
              • Drops file in Windows directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Enumerates system info in registry
              • Modifies registry class
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of FindShellTrayWindow
              • Suspicious use of SendNotifyMessage
              • Suspicious use of SetWindowsHookEx
              • Suspicious use of WriteProcessMemory
              PID:6920
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x27c,0x280,0x284,0x278,0x288,0x7fff50f35d30,0x7fff50f35d40,0x7fff50f35d50
                7⤵
                • Executes dropped EXE
                PID:2780
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1908,i,7238852102750166718,7792684290160898151,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2208 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                PID:7096
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1636,i,10874616975051638544,12914545830243713419,262144 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2160 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:2804
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2524,i,1505744107296304746,15069680363808835119,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2540 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:4736
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3276,i,7383249960906898717,5293637379692918162,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3240 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7028
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3288,i,5566088570795615446,11116811161199742415,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3312 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6924
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3388,i,16565898523583645184,10538356693710248364,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3428 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:7076
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3420,i,13588737476222364067,2062256461606062314,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3452 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6188
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3268,i,15119041397774679004,9779883215804568880,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3332 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:5320
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3356,i,7367504627354824873,5535660190713849175,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3384 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:4696
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2556,i,8050514231519325040,5811486047545046546,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3352 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:4968
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4132,i,17851180839647248361,5786270704317341539,2097152 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4136 /prefetch:1
                7⤵
                • Enumerates system info in registry
                PID:1288
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_gx_splash.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                7⤵
                • Modifies registry class
                • Suspicious use of AdjustPrivilegeToken
                PID:2164
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4828,i,9642602735359050690,8898238824513232493,2097152 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4832 /prefetch:9
                7⤵
                  PID:3248
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4980,i,7622743241809087586,3927978536211165112,2097152 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5004 /prefetch:1
                  7⤵
                  • Enumerates system info in registry
                  PID:7048
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5288,i,512374381542971203,16780038909755997700,2097152 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5296 /prefetch:1
                  7⤵
                  • Enumerates system info in registry
                  PID:4964
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5328,i,11237466864272556135,9291798932185895957,2097152 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5448 /prefetch:1
                  7⤵
                    PID:6244
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6276,i,17261036519946304899,12863353368581978049,2097152 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6400 /prefetch:9
                    7⤵
                      PID:6308
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6928,i,1359955072627423415,8501769190594068238,2097152 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6980 /prefetch:9
                      7⤵
                        PID:6332
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6920,i,3902139264438651900,10742077705717755918,2097152 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=7076 /prefetch:9
                        7⤵
                          PID:5772
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6688,i,15746411565266086497,9705831599035982366,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6720 /prefetch:12
                          7⤵
                          • Enumerates system info in registry
                          PID:6312
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6604,i,6742604034745367116,11007843207667269601,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5716 /prefetch:14
                          7⤵
                            PID:2432
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6744,i,204920195786062290,10242405786004392548,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7520 /prefetch:14
                            7⤵
                              PID:7164
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7564,i,12076644771560323248,1538108351498006614,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7576 /prefetch:14
                              7⤵
                              • Enumerates system info in registry
                              PID:6860
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7708,i,8379000601279587738,16265769271284724675,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7736 /prefetch:14
                              7⤵
                              • Enumerates system info in registry
                              PID:6396
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7740,i,132274086333742277,1098625897875890372,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7896 /prefetch:14
                              7⤵
                              • Enumerates system info in registry
                              PID:3540
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8020,i,6799010575964617,6908255998894392078,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7776 /prefetch:14
                              7⤵
                              • Enumerates system info in registry
                              PID:6428
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6888,i,5950537189204916351,8686881227497441416,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8132 /prefetch:14
                              7⤵
                                PID:2932
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8180,i,7860127693715015065,2332430944078197271,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8172 /prefetch:14
                                7⤵
                                • Enumerates system info in registry
                                PID:6800
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8156,i,10435103591580893558,6956525143139623615,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8316 /prefetch:14
                                7⤵
                                • Enumerates system info in registry
                                PID:6624
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8564,i,2537134054456624210,4824927631246446180,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8592 /prefetch:14
                                7⤵
                                • Enumerates system info in registry
                                PID:6740
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8552,i,14139789519355713833,8432792336031638532,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8568 /prefetch:14
                                7⤵
                                • Enumerates system info in registry
                                PID:6708
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8608,i,832001152959904107,11498125341347382414,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8836 /prefetch:14
                                7⤵
                                  PID:6748
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8840,i,9231000445807491372,2432780186911476382,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8992 /prefetch:14
                                  7⤵
                                  • Enumerates system info in registry
                                  PID:6724
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8864,i,2853425922621817186,5039777347958256114,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9016 /prefetch:14
                                  7⤵
                                    PID:6796
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9028,i,8017528956530202752,5683446518347900389,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9048 /prefetch:14
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:5868
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=9296,i,16339258822320163241,12548251919511547215,2097152 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9484 /prefetch:9
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:6844
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                    7⤵
                                    • Reads the TCP/IP host and domain name from the registry
                                    PID:7592
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                      C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2a0,0x2a4,0x2a8,0x27c,0x2ac,0x7ff75faf5598,0x7ff75faf55a8,0x7ff75faf55b8
                                      8⤵
                                        PID:7660
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9756,i,10623741251089890009,7689209630058213778,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=4132 /prefetch:14
                                      7⤵
                                        PID:7780
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9872,i,12813606132121793483,1971249570743583965,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9880 /prefetch:14
                                        7⤵
                                          PID:7824
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10308,i,117349944141146765,8221250189253774477,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10320 /prefetch:14
                                          7⤵
                                          • Enumerates system info in registry
                                          PID:7916
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=10548,i,3723024300088977616,10301088759362809301,2097152 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10604 /prefetch:1
                                          7⤵
                                          • Enumerates system info in registry
                                          PID:8048
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10784,i,13448111282563908332,13097712071379146514,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10828 /prefetch:14
                                          7⤵
                                          • Enumerates system info in registry
                                          PID:6700
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10992,i,4319544011177345851,3239632993039571397,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10840 /prefetch:14
                                          7⤵
                                            PID:7348
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11104,i,13938136064470133284,457603110133568090,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=11116 /prefetch:14
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:6848
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=7784,i,12197526779012540406,2463885182855243911,2097152 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=7752 /prefetch:1
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:4100
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3948,i,8515537533016672344,10695968628835281920,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=4244 /prefetch:14
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:5284
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4140,i,18259427984993689843,4129393672547084051,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=4156 /prefetch:14
                                            7⤵
                                              PID:7368
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4000,i,558885353403772387,8412434552018227275,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=4224 /prefetch:14
                                              7⤵
                                                PID:6916
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4004,i,13171885642751857619,5925375673118354944,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=4160 /prefetch:14
                                                7⤵
                                                  PID:7864
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3956,i,7356034372567975918,7104269601633310845,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=4012 /prefetch:14
                                                  7⤵
                                                    PID:7804
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=3804,i,480106501881174788,10322659961568242971,2097152 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=3820 /prefetch:9
                                                    7⤵
                                                      PID:6324
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=2556,i,12501365350249310405,6295009273659982390,2097152 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=3352 /prefetch:9
                                                      7⤵
                                                      • Enumerates system info in registry
                                                      PID:6556
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5672,i,1980075012290740423,4016676085629853852,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=3664 /prefetch:14
                                                      7⤵
                                                      • Enumerates system info in registry
                                                      PID:7304
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7852,i,4390468918048104486,17578059380365471202,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=4232 /prefetch:14
                                                      7⤵
                                                      • Enumerates system info in registry
                                                      PID:6896
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4088,i,18061929746679189594,1465928646493481422,524288 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=9148 /prefetch:14
                                                      7⤵
                                                      • Enumerates system info in registry
                                                      PID:4260
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=3556,i,2539860100133266456,8644436415915108710,2097152 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=3716 /prefetch:9
                                                      7⤵
                                                        PID:8040
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=8424,i,3988990430438297709,3877340800080070433,2097152 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=8420 /prefetch:9
                                                        7⤵
                                                          PID:7524
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=9952,i,583923111258978127,2348895641574307772,2097152 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=7300 /prefetch:9
                                                          7⤵
                                                          • Enumerates system info in registry
                                                          PID:7076
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=10864,i,9427087241370566667,15396718542667343979,2097152 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=628 /prefetch:9
                                                          7⤵
                                                            PID:2068
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --disable-gpu-sandbox --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAAAAAAAAAAAADgAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAADAAAAAEAAAAAAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=d3d11-warp-webgl --metrics-shmem-handle=3704,i,9329701113642866855,4259860328664726019,262144 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=9128 /prefetch:10
                                                            7⤵
                                                            • Network Service Discovery
                                                            • Suspicious behavior: EnumeratesProcesses
                                                            PID:4820
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=4928,i,13387438909546199554,15299524813844753332,2097152 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=9296 /prefetch:9
                                                            7⤵
                                                            • Enumerates system info in registry
                                                            PID:2100
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=7804,i,11052291686133860307,4085186729145162236,2097152 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=3680 /prefetch:1
                                                            7⤵
                                                              PID:5444
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=664,i,2625390389091589184,15185162566438261561,2097152 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=9272 /prefetch:9
                                                              7⤵
                                                                PID:3388
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=7360,i,15981794857285526779,7982175820153750078,2097152 --field-trial-handle=2164,i,12889381307323146204,8999782728110382089,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2168,i,9579041585448236041,5828648965310380359,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=7792 /prefetch:1
                                                                7⤵
                                                                  PID:608
                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\opera_package_202609291610441\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe
                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\opera_package_202609291610441\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe"
                                                            4⤵
                                                            • Executes dropped EXE
                                                            • Writes a Windows system DLL name to a user directory
                                                            • System Location Discovery: System Language Discovery
                                                            PID:3336
                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\opera_package_202609291610441\assistant\assistant_installer.exe
                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\opera_package_202609291610441\assistant\assistant_installer.exe" --version
                                                            4⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • System Location Discovery: System Language Discovery
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:4752
                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\opera_package_202609291610441\assistant\assistant_installer.exe
                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\opera_package_202609291610441\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x66c9cc,0x66c9d8,0x66c9e4
                                                              5⤵
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              • System Location Discovery: System Language Discovery
                                                              PID:5764
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                                      1⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • Suspicious use of WriteProcessMemory
                                                      PID:2912
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                                                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7fff50f35d30,0x7fff50f35d40,0x7fff50f35d50
                                                        2⤵
                                                        • Executes dropped EXE
                                                        PID:4464
                                                    • C:\Windows\system32\wbem\unsecapp.exe
                                                      C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                      1⤵
                                                        PID:4272
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                        1⤵
                                                        • Reads the TCP/IP host and domain name from the registry
                                                        PID:7600
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                          C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff75faf5598,0x7ff75faf55a8,0x7ff75faf55b8
                                                          2⤵
                                                            PID:7796
                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                            2⤵
                                                              PID:7196
                                                          • C:\Windows\SysWOW64\DllHost.exe
                                                            C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
                                                            1⤵
                                                            • System Location Discovery: System Language Discovery
                                                            • Suspicious use of SetWindowsHookEx
                                                            PID:8032
                                                          • C:\Windows\system32\svchost.exe
                                                            C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                                                            1⤵
                                                              PID:7752
                                                            • C:\Windows\system32\OpenWith.exe
                                                              C:\Windows\system32\OpenWith.exe -Embedding
                                                              1⤵
                                                              • Modifies registry class
                                                              • Suspicious use of SetWindowsHookEx
                                                              PID:4700
                                                            • C:\Windows\system32\OpenWith.exe
                                                              C:\Windows\system32\OpenWith.exe -Embedding
                                                              1⤵
                                                              • Modifies registry class
                                                              • Suspicious use of SetWindowsHookEx
                                                              PID:8064
                                                            • C:\Windows\system32\OpenWith.exe
                                                              C:\Windows\system32\OpenWith.exe -Embedding
                                                              1⤵
                                                              • Modifies registry class
                                                              PID:6152

                                                            Network

                                                                  MITRE ATT&CK Enterprise v16

                                                                  Reconnaissance

                                                                  Resource Development

                                                                  Initial Access

                                                                  Execution

                                                                  Persistence

                                                                  Boot or Logon Autostart Execution

                                                                  1
                                                                  T1547

                                                                  Registry Run Keys / Startup Folder

                                                                  1
                                                                  T1547.001

                                                                  Event Triggered Execution

                                                                  1
                                                                  T1546

                                                                  Component Object Model Hijacking

                                                                  1
                                                                  T1546.015

                                                                  Hijack Execution Flow

                                                                  1
                                                                  T1574

                                                                  DLL Search Order Hijacking

                                                                  1
                                                                  T1574.001

                                                                  Privilege Escalation

                                                                  Boot or Logon Autostart Execution

                                                                  1
                                                                  T1547

                                                                  Registry Run Keys / Startup Folder

                                                                  1
                                                                  T1547.001

                                                                  Event Triggered Execution

                                                                  1
                                                                  T1546

                                                                  Component Object Model Hijacking

                                                                  1
                                                                  T1546.015

                                                                  Hijack Execution Flow

                                                                  1
                                                                  T1574

                                                                  DLL Search Order Hijacking

                                                                  1
                                                                  T1574.001

                                                                  Defense Evasion

                                                                  Hijack Execution Flow

                                                                  1
                                                                  T1574

                                                                  DLL Search Order Hijacking

                                                                  1
                                                                  T1574.001

                                                                  Masquerading

                                                                  1
                                                                  T1036

                                                                  Match Legitimate Name or Location

                                                                  1
                                                                  T1036.005

                                                                  Modify Registry

                                                                  2
                                                                  T1112

                                                                  Credential Access

                                                                  Credentials from Password Stores

                                                                  1
                                                                  T1555

                                                                  Credentials from Web Browsers

                                                                  1
                                                                  T1555.003

                                                                  Unsecured Credentials

                                                                  1
                                                                  T1552

                                                                  Credentials In Files

                                                                  1
                                                                  T1552.001

                                                                  Discovery

                                                                  Network Service Discovery

                                                                  1
                                                                  T1046

                                                                  Peripheral Device Discovery

                                                                  1
                                                                  T1120

                                                                  Query Registry

                                                                  5
                                                                  T1012

                                                                  System Information Discovery

                                                                  4
                                                                  T1082

                                                                  System Location Discovery

                                                                  1
                                                                  T1614

                                                                  System Language Discovery

                                                                  1
                                                                  T1614.001

                                                                  System Network Configuration Discovery

                                                                  1
                                                                  T1016

                                                                  System Time Discovery

                                                                  1
                                                                  T1124

                                                                  Lateral Movement

                                                                  Collection

                                                                  Data from Local System

                                                                  1
                                                                  T1005

                                                                  Command and Control

                                                                  Exfiltration

                                                                  Impact

                                                                  Replay Monitor

                                                                  Loading Replay Monitor...

                                                                  Downloads

                                                                  E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                  • Size 471B
                                                                  • SHA256 2a9320306874279401b74e0b9cbcf4292c77df0db663e0be265e46802bcee7f9
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                  • Size 416B
                                                                  • SHA256 bd6425cf357b208a0e587d4a146b0e3b923b88316720bba35314d33cf2b158c6
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  data_0
                                                                  • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_0
                                                                  • Size 44KB
                                                                  • SHA256 2139d5e21c17294c81fb1db21d3f1b10ce3c64fb455d7c23286cacf962c7bf40
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  data_2
                                                                  • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_2
                                                                  • Size 8KB
                                                                  • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                  Submit Download

                                                                  data_3
                                                                  • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_3
                                                                  • Size 8KB
                                                                  • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                  Submit Download

                                                                  f_000001
                                                                  • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
                                                                  • Size 163KB
                                                                  • SHA256 8d59dd74c3d4d15ad9c740224b9758aa997fa9046654a6b9c53bbbd2f6686888
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  136.0.6008.52.manifest
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\136.0.6008.52.manifest
                                                                  • Size 225B
                                                                  • SHA256 e4932cf87759845a5f1bdd3199ae94d5896f4ce58f8b6b9fa24942f90a7fa7f9
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  150x150Logo.scale-100.png
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-100.png
                                                                  • Size 1KB
                                                                  • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  150x150Logo.scale-100_contrast-white.png
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-100_contrast-white.png
                                                                  • Size 1KB
                                                                  • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  150x150Logo.scale-140.png
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-140.png
                                                                  • Size 1KB
                                                                  • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  150x150Logo.scale-140_contrast-white.png
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-140_contrast-white.png
                                                                  • Size 1KB
                                                                  • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  150x150Logo.scale-180.png
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-180.png
                                                                  • Size 1KB
                                                                  • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  150x150Logo.scale-180_contrast-white.png
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-180_contrast-white.png
                                                                  • Size 1KB
                                                                  • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  150x150Logo.scale-80.png
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-80.png
                                                                  • Size 827B
                                                                  • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  150x150Logo.scale-80_contrast-white.png
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-80_contrast-white.png
                                                                  • Size 799B
                                                                  • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  70x70Logo.scale-100.png
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-100.png
                                                                  • Size 781B
                                                                  • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  70x70Logo.scale-100_contrast-white.png
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-100_contrast-white.png
                                                                  • Size 752B
                                                                  • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  70x70Logo.scale-140.png
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-140.png
                                                                  • Size 991B
                                                                  • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  70x70Logo.scale-140_contrast-white.png
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-140_contrast-white.png
                                                                  • Size 865B
                                                                  • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  70x70Logo.scale-180.png
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-180.png
                                                                  • Size 1KB
                                                                  • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  70x70Logo.scale-180_contrast-white.png
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-180_contrast-white.png
                                                                  • Size 1KB
                                                                  • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  70x70Logo.scale-80.png
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-80.png
                                                                  • Size 590B
                                                                  • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  70x70Logo.scale-80_contrast-white.png
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-80_contrast-white.png
                                                                  • Size 519B
                                                                  • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  assistant_package
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\assistant_package
                                                                  • Size 3.6MB
                                                                  • SHA256 fbbc603017d6361fbf735e11ba816cceadad30328bb2ede9ecee73f2b56bd59c
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  d3dcompiler_47.dll
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\d3dcompiler_47.dll
                                                                  • Size 4.5MB
                                                                  • SHA256 4b87ecdd1bfd4b8143452d107d9ea7a917f7e03c1f517b9b95cbae5ca3999069
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  dxcompiler.dll
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\dxcompiler.dll
                                                                  • Size 24.6MB
                                                                  • SHA256 b38658d0c434edc2d13247956a6aafd1438851f959ad61b5f9e0c1bba6bd2d9f
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  dxil.dll
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\dxil.dll
                                                                  • Size 1.5MB
                                                                  • SHA256 cdb874862b72cfcdb6dbdca698b462e1546c7fc9b215151c73c8f4681ad6c799
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  files_list
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\files_list
                                                                  • Size 6KB
                                                                  • SHA256 0c087ff2c9b81050f0e8940371993a46a90267bdd94af7b5152787245dcb2742
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  headless_command_resources.pak
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\headless_command_resources.pak
                                                                  • Size 2KB
                                                                  • SHA256 90e398ef08a0178d1efd373addb5070a551011be8b9d27fcc2f234e430a8ad98
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  icudtl.dat
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\icudtl.dat
                                                                  • Size 10.4MB
                                                                  • SHA256 f11071c692e85689891070cb6f68120dc1a49941325325f7e5b017af42483e72
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  installer.exe
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe
                                                                  • Size 8.3MB
                                                                  • SHA256 07615e6bf94841a360802ceb411b81e8329dd21b57c2045335b99c36c007f5d8
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  installer_helper_64.exe
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer_helper_64.exe
                                                                  • Size 601KB
                                                                  • SHA256 3ab73bfb35ec3d7c20511f2c2e9ca60ef7514f15641209705fa9b8058de4c190
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  libEGL.dll
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\libEGL.dll
                                                                  • Size 460KB
                                                                  • SHA256 628f6a6eb054218f3357381d42ebf63e008316e564e1695ebd2925b7c6d050eb
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  libGLESv2.dll
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\libGLESv2.dll
                                                                  • Size 460KB
                                                                  • SHA256 6ea449f57a607ce9d6186bca8a16514c52ee112d94e3af2e69beb904b54593cd
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  bg.pak
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\bg.pak
                                                                  • Size 1021KB
                                                                  • SHA256 7958eea00f4ef14a9b3a9021b87ae4cdace36ca171d6487e09427c980925066a
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  bn.pak
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\bn.pak
                                                                  • Size 1.3MB
                                                                  • SHA256 6307636ac68ea9742dba9dcafd1a6cba2c086be46c25fc10c9392a083f67a763
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  ca.pak
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\ca.pak
                                                                  • Size 642KB
                                                                  • SHA256 0cb115bf30541172098fb7a542713d2a86607e1c9f6c36e459015f0b2cc2876c
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  cs.pak
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\cs.pak
                                                                  • Size 641KB
                                                                  • SHA256 b8a82ad00c2a033704cf0a9b6a20d4c48f61cab7d6fafd60d5ed7120946d0a64
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  da.pak
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\da.pak
                                                                  • Size 590KB
                                                                  • SHA256 1d767d2231eeaf346ee7d5eafceaef5884df41666cafa057ec9784da278a75c1
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  de.pak
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\de.pak
                                                                  • Size 639KB
                                                                  • SHA256 ed7fd31b1e80c5de13e985a0c15becf8c99f6bc153891c853e144a05b1bf603f
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  el.pak
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\el.pak
                                                                  • Size 1.1MB
                                                                  • SHA256 fa8f4b42f21b74e386c88f66aa6802076e78da4e442fd74d875cbccd6af00419
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  en-GB.pak
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\en-GB.pak
                                                                  • Size 518KB
                                                                  • SHA256 6f735948c21e15f796292e92dda0f4820982774f9b3adfd31a6a3c11284783fc
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  installer_prefs.json7af5da57-606a-4535-87fa-45af63f37d01.tmp
                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json7af5da57-606a-4535-87fa-45af63f37d01.tmp
                                                                  • Size 1KB
                                                                  • SHA256 1b887ea0348016a1d8473e893200a9e9cf28286c73ed9b30184a6bfdced6e2f7
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  Opera Browser.lnk
                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\opera_package_202609291610441\Opera Browser.lnk
                                                                  • Size 1KB
                                                                  • SHA256 e7bd96de5720bd24e1f595adb7a52acc10b3dd01e80361fda4bb493f9cc8598f
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  additional_file0.tmp
                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\opera_package_202609291610441\additional_file0.tmp
                                                                  • Size 2.9MB
                                                                  • SHA256 30786977e61add36f7c641facfb7fce1b2ec7c2a0a7e055a172f127a68788556
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  assistant_installer.exe
                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\opera_package_202609291610441\assistant\assistant_installer.exe
                                                                  • Size 2.4MB
                                                                  • SHA256 e8dce277d6edb918499526fadba9902e317496c2af077219f263a7a643467824
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  dbgcore.DLL
                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\opera_package_202609291610441\assistant\dbgcore.DLL
                                                                  • Size 196KB
                                                                  • SHA256 c16220edd3787da33dbd3ac2fcbec7de6a13e2baf14ae6105bba68d4efd83628
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  dbghelp.dll
                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\opera_package_202609291610441\assistant\dbghelp.dll
                                                                  • Size 1.8MB
                                                                  • SHA256 990b13e88b4a9985eb5c596078e2ec26a0edcc22169dd71f8a84c7943005306c
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  installer_prefs_include.json
                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\opera_package_202609291610441\installer_prefs_include.json
                                                                  • Size 264B
                                                                  • SHA256 44c54307dfec9d9f2bc9a8d53b99979e5e2d6542792b92344d1e3a6de2fb0cbf
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  installer_prefs_include.json
                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\opera_package_202609291610441\installer_prefs_include.json
                                                                  • Size 279B
                                                                  • SHA256 4ec2140ade86f38f637a2f869c41136e99f872a9f9bc07fb17e339508440e97e
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  installer_prefs_include.json
                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c7c0c439-78ae-49bb-a666-fa65b912722a Opera Installer Temp\opera_package_202609291610441\installer_prefs_include.json
                                                                  • Size 1KB
                                                                  • SHA256 8ff67bfc8383d8407a10af993ff78a8d95df4bc74353ceaf66979ebd3a428325
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  installer.exe
                                                                  • Path C:\Users\Admin\AppData\Local\Temp\7zS055B1579\installer.exe
                                                                  • Size 8.3MB
                                                                  • SHA256 a98e228f9d31c84cec88654b9fbf48e8bbec816fd1ab935572f448fd997c2c31
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  OpInst.exe
                                                                  • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                                                  • Size 3.1MB
                                                                  • SHA256 1d15270e675da0b87985a296a8574238146697b1889606c02f4f4fde17cdf5cc
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  bg.png
                                                                  • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                                                  • Size 224KB
                                                                  • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  favicon_opera_one.png
                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2716_1029255985\CRX_INSTALL\favicon_opera_one.png
                                                                  • Size 2KB
                                                                  • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  messages.json
                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6612_1981295696\CRX_INSTALL\_locales\en\messages.json
                                                                  • Size 387B
                                                                  • SHA256 554cbb0514a7897ebe50043e0de9fabfcf321dcbd3c39e77cb96e62d871c7bc3
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  messages.json
                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6612_1981295696\CRX_INSTALL\_locales\en\messages.json
                                                                  • Size 401B
                                                                  • SHA256 9ad8ffac49958d5bf771eb6f0bd7462b32597696c9d0a45ade771ef8c124b1bb
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  messages.json
                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6612_1981295696\CRX_INSTALL\_locales\es\messages.json
                                                                  • Size 424B
                                                                  • SHA256 b04b308252b490b9555e5e002c5c6da63f3a6d517e2f659a626a500467e21100
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  preview.png
                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6612_1981295696\CRX_INSTALL\wallpaper\preview.png
                                                                  • Size 464KB
                                                                  • SHA256 c5a2b18b255c6a4029de97ef9d00af6e563b562a2abdbee1e934ff77d5a92c29
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  Icon_Light_Neutral.png
                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6920_1971704859\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                  • Size 2KB
                                                                  • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  61b40b29cde26805.customDestinations-ms
                                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\61b40b29cde26805.customDestinations-ms
                                                                  • Size 24KB
                                                                  • SHA256 9f658eb7f59490e77b43c76b45dfec3e442f366ea9d272d073356eb17d45c385
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  61b40b29cde26805.customDestinations-ms
                                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\61b40b29cde26805.customDestinations-ms
                                                                  • Size 24KB
                                                                  • SHA256 42ce733b35a94d61585b8370e1d2d84c01adf408bddabab5fa5d3223630d732b
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  61b40b29cde26805.customDestinations-ms
                                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\61b40b29cde26805.customDestinations-ms
                                                                  • Size 24KB
                                                                  • SHA256 d594947ce7c06751e9e1bd84f1040662a3bc39c6ef4fad6f9e91109eca522d38
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  61b40b29cde26805.customDestinations-ms
                                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\61b40b29cde26805.customDestinations-ms
                                                                  • Size 24KB
                                                                  • SHA256 4baec263275ead5fc875866b629cd21ed0537b2417a4d7cf5f2569cf846328ff
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  61b40b29cde26805.customDestinations-ms
                                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\61b40b29cde26805.customDestinations-ms
                                                                  • Size 24KB
                                                                  • SHA256 a558f75b7ab996be1846cad979e03c62dfa516e0a20d3fc599b389356d9a91f7
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  settings.dat
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                  • Size 40B
                                                                  • SHA256 ba50dde8e9b16f009b91a370e6f88d24526a173e74f77fd6e491506ea1ec3562
                                                                  • MD5 SHA1 SHA512
                                                                  Submit Download

                                                                  15f1cba1-e548-44fd-811b-562c53fe28a3.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\15f1cba1-e548-44fd-811b-562c53fe28a3.tmp
                                                                  • Size 171B
                                                                  • SHA256 4f087698dc23ca5679cb091e15d09589105bc90358c40975083a35360e8591a8
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  275acdd4-3d2a-4030-8af0-cd6d843a1ce9.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\275acdd4-3d2a-4030-8af0-cd6d843a1ce9.tmp
                                                                  • Size 371B
                                                                  • SHA256 7dc0467026315035ef1a9cd882c6f706d990b8d0dd4ae0076d9b90e225d329e1
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  4c0f4c28-4a51-4142-8c9c-b784ff4cdcbc.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\4c0f4c28-4a51-4142-8c9c-b784ff4cdcbc.tmp
                                                                  • Size 203B
                                                                  • SHA256 8bf683467efa6c0c58cb3087240c53b72000894c5ee7ca55bcc1196fbe69d7a8
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  BookmarkMergedSurfaceOrdering92557c5c-ed7c-4c35-aac7-7e594c0aa4cb.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarkMergedSurfaceOrdering92557c5c-ed7c-4c35-aac7-7e594c0aa4cb.tmp
                                                                  • Size 6B
                                                                  • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                  • MD5 SHA1 SHA512
                                                                  Submit Download

                                                                  Bookmarks
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                                                  • Size 34KB
                                                                  • SHA256 7f893875a01a5d4394ac4f2c01bd00e244adde788eb659e930f65055d3f485d4
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  BookmarksExtras
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                                                                  • Size 197KB
                                                                  • SHA256 9ae3beea5705490203556c42ebb2568fec6fc435b3315cd33956e872a898344b
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  BookmarksExtrasdc628f08-3d22-49b9-b6cc-e642341192db.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtrasdc628f08-3d22-49b9-b6cc-e642341192db.tmp
                                                                  • Size 2B
                                                                  • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                  • MD5 SHA1 SHA512
                                                                  Submit Download

                                                                  38cbede3-bc18-4ec1-a4c1-54035c3ece9e.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\38cbede3-bc18-4ec1-a4c1-54035c3ece9e.tmp
                                                                  • Size 48B
                                                                  • SHA256 cb721a2af6c106b2c768a858c8ff4797aca4a2dbb160ee78f876bfe6ca38c7a0
                                                                  • MD5 SHA1 SHA512
                                                                  Submit Download

                                                                  the-real-index
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                  • Size 336B
                                                                  • SHA256 2304dd14c6b9adbf8320e3c5cc8477b62d8f0c49f14723242800a785c73e6fa9
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  the-real-index
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                  • Size 360B
                                                                  • SHA256 58c7465efa4ba5a8fd7c3187f3cd5b1e544ae80706db4e0612c9eecdbfc45be1
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  the-real-index
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                  • Size 768B
                                                                  • SHA256 8c717f6bdea4e4de1c502fba0e9873df951702f05ed2aa66e1e8314decabfb54
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  main.js
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.8_0\main.js
                                                                  • Size 47KB
                                                                  • SHA256 9cc5e1dd96d76735499257c52d632a0a9e17ed4da929035067dadcc586000335
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  logo_128.png
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\icons\logo_128.png
                                                                  • Size 7KB
                                                                  • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  logo_16.png
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\icons\logo_16.png
                                                                  • Size 653B
                                                                  • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  logo_32.png
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\icons\logo_32.png
                                                                  • Size 1KB
                                                                  • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  logo_48.png
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\icons\logo_48.png
                                                                  • Size 2KB
                                                                  • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  logo_64.png
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\icons\logo_64.png
                                                                  • Size 2KB
                                                                  • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  service-worker-loader.js
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\service-worker-loader.js
                                                                  • Size 49B
                                                                  • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                                  • MD5 SHA1 SHA512
                                                                  Submit Download

                                                                  favicon_opera_one.png
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\favicon_opera_one.png
                                                                  • Size 2KB
                                                                  • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  reader_mode.js
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\reader_mode.js
                                                                  • Size 112KB
                                                                  • SHA256 17f8a5c1d70acee668cc6964317d88802d4409c32b0d7e292b95e1de8ddb16df
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  spotify_frame_interceptor.js
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\spotify_frame_interceptor.js
                                                                  • Size 5KB
                                                                  • SHA256 895ef6ae0efde6f5e8af23d1acbfac4a5351bda31c89d2e64c05f2de0181dd56
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  background.js
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\background.js
                                                                  • Size 87KB
                                                                  • SHA256 b199d4f989c63947c53a9d07450038cfe274b7a10e8cc7d688c4049ae14ef63e
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  Icon_Light_Neutral.png
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Neutral.png
                                                                  • Size 2KB
                                                                  • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  popup.js.LICENSE.txt
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\popup.js.LICENSE.txt
                                                                  • Size 1KB
                                                                  • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  rules.json
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\rules.json
                                                                  • Size 839B
                                                                  • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  0d874033-7e83-42fd-94e7-95353e89b788.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\0d874033-7e83-42fd-94e7-95353e89b788.tmp
                                                                  • Size 27KB
                                                                  • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  7bee8990-fd92-4140-a8b2-a0ceee456bb8.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\7bee8990-fd92-4140-a8b2-a0ceee456bb8.tmp
                                                                  • Size 27KB
                                                                  • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  84eabef9-6323-44a0-adc2-2329476e3740.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\84eabef9-6323-44a0-adc2-2329476e3740.tmp
                                                                  • Size 27KB
                                                                  • SHA256 3c5dfa15d581def92644fe4db0be64e2884f7f7ad01ec81671acdd44c70efcd4
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  e80b21b2-006b-49db-a011-3b198f94d67e.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\e80b21b2-006b-49db-a011-3b198f94d67e.tmp
                                                                  • Size 27KB
                                                                  • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  e89948f1-56e4-479d-a689-1d6732030590.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\e89948f1-56e4-479d-a689-1d6732030590.tmp
                                                                  • Size 27KB
                                                                  • SHA256 353f070543d1c43247d565c23d4c0346a8d65d902aa7bae04c6ae5e64bc5cde7
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  f849cea1-b62e-47e8-8804-76fe5855e888.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\f849cea1-b62e-47e8-8804-76fe5855e888.tmp
                                                                  • Size 27KB
                                                                  • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  Network Persistent State
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                  • Size 1KB
                                                                  • SHA256 9b4f79422018b36cb259ba0352fba43a661995ed76ce66456fd5281b717e1b58
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  Network Persistent State
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                  • Size 61B
                                                                  • SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  Network Persistent Statee6702ead-bb4b-4d48-96c2-f6218e88d738.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent Statee6702ead-bb4b-4d48-96c2-f6218e88d738.tmp
                                                                  • Size 111B
                                                                  • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  SCT Auditing Pending Reportseb6e205a-2f18-4225-abbb-2077ef20f68f.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\SCT Auditing Pending Reportseb6e205a-2f18-4225-abbb-2077ef20f68f.tmp
                                                                  • Size 2B
                                                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                  • MD5 SHA1 SHA512
                                                                  Submit Download

                                                                  Preferences
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                  • Size 10KB
                                                                  • SHA256 264d50bf282e61cb3083d7781fdd4c9148652f819061df337fa4e1f09eb9b88f
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  Preferences
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                  • Size 11KB
                                                                  • SHA256 4af931817b6362c0c2783548f9d33ff081a5bdc6fc530538750232e5825d507c
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  Preferences
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                  • Size 15KB
                                                                  • SHA256 0b47fb08053ef3be2ce3c1595e304b269ac69e1bc59ea7425edbc207568817cc
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  Preferences
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                  • Size 16KB
                                                                  • SHA256 4ebca62d02754dae31d6a495123342959e0764de663c0882a0afbdd5816173dd
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  Preferences
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                  • Size 15KB
                                                                  • SHA256 d71bb74dfe052cb8c50633e5588b3cd658cc74bbe7896898680e0a9b63a0fa86
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  Preferences
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                  • Size 16KB
                                                                  • SHA256 b4b4f160e61850dffa1901d6826d6ef5222a0dc9f9fb164162ad790214b05e37
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  Secure Preferences
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                  • Size 112KB
                                                                  • SHA256 da6c41807553706e451f20485dffba5b9f6bb7fab1a0c625e1b12e55fdea3f8a
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  Secure Preferences
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                  • Size 85KB
                                                                  • SHA256 51b75829ef1dade02add1b54fa9ee60d846ce06bba1980136a8614418d6ed2b8
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  Secure Preferences
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                  • Size 85KB
                                                                  • SHA256 de6fe912012b9a92cea2275c5f63c6a50283640fcc3daf992370edc39aef3a90
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  index
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\018f790ef5aa47d5eb3721c843ab3733dd2e9c84\2efafcfb-21b7-45e4-91fd-e8f3bcbb2688\index
                                                                  • Size 24B
                                                                  • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                  • MD5 SHA1 SHA512
                                                                  Submit Download

                                                                  551829ed-03f4-4642-83fd-465dabdea625.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\018f790ef5aa47d5eb3721c843ab3733dd2e9c84\551829ed-03f4-4642-83fd-465dabdea625.tmp
                                                                  • Size 187B
                                                                  • SHA256 5b8fd1de0c658d5e4a494c27eaad651533f9da3e4990272c9217d5ea0ef37304
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  index.txt
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\018f790ef5aa47d5eb3721c843ab3733dd2e9c84\index.txt
                                                                  • Size 180B
                                                                  • SHA256 41576a47ad7d44971bd2ee8655e6e4c5759b5414fc84ea8e3625ddfdfc5e07c2
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  9f2b80d7-7384-4e33-85b0-32a71aff61f1.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\9f2b80d7-7384-4e33-85b0-32a71aff61f1.tmp
                                                                  • Size 96B
                                                                  • SHA256 90d4aa6547aa5d1eb7f794926ec80a7297a565054d0af885c0fd2d34af917087
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  d3177c49-f668-417a-9857-8cd6904d051c.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\d3177c49-f668-417a-9857-8cd6904d051c.tmp
                                                                  • Size 72B
                                                                  • SHA256 74afef9072acaf3921a3ef634a056d6ebba9a9e2b5c0c33d8cc800730b2de938
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  the-real-index
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                  • Size 96B
                                                                  • SHA256 5dd5e33c9c00275ad80dd661b42f5b866cd0bbc02da39114d2386e83c47ae717
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  the-real-index
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                  • Size 360B
                                                                  • SHA256 fbece69b86342fd36ba4f3697b03472c5981ddb82a1ed7b9f46d87f9fc7adfa9
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  the-real-index
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                  • Size 216B
                                                                  • SHA256 0bbcdbc34e1f2c537bc3dafaa67cbc7ac0196ea4627c60398bb04863614271e8
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  82d8b308-c5a5-4838-8fa9-7338f7e04a8c.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\82d8b308-c5a5-4838-8fa9-7338f7e04a8c.tmp
                                                                  • Size 381B
                                                                  • SHA256 9f80d1688e0dbc6e06cb4bf7a2714141bff245f6e94e53db55bb6ab288a2c906
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  94150252-b6bb-4e19-8fe9-69e41d92e40c.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\94150252-b6bb-4e19-8fe9-69e41d92e40c.tmp
                                                                  • Size 381B
                                                                  • SHA256 093dbae0008f40c81abb541dca4b91ad18218ad2cfed4acf1b34e733f4a2501f
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  d4466834-8f11-4453-9abb-497be973a5dc.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\d4466834-8f11-4453-9abb-497be973a5dc.tmp
                                                                  • Size 381B
                                                                  • SHA256 bad8d628b32836aad27bd6f7d619d8830df49fd91d969b9da4d3ca5515794b55
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_274773c7-8f57-4df1-a79c-2a0b8779316e.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_274773c7-8f57-4df1-a79c-2a0b8779316e.raw
                                                                  • Size 637B
                                                                  • SHA256 596fd696bcc54cbe7d5e127c5bd98d23a4b7c2c3bcd69fcccc3c8a012c9bd60f
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_274773c7-8f57-4df1-a79c-2a0b8779316e.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_274773c7-8f57-4df1-a79c-2a0b8779316e.raw
                                                                  • Size 637B
                                                                  • SHA256 ad77296d2ba19f7f49ec19b50a0b55bb2a4aaa4feaf719b25c5909a7a5208a4a
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_274773c7-8f57-4df1-a79c-2a0b8779316e.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_274773c7-8f57-4df1-a79c-2a0b8779316e.raw
                                                                  • Size 493B
                                                                  • SHA256 cce7bcb9a99ee5f689cbd1d9ce1fc990b69dbdbe6ff9e8105ac2cf04b8b89bf0
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_274773c7-8f57-4df1-a79c-2a0b8779316e.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_274773c7-8f57-4df1-a79c-2a0b8779316e.raw
                                                                  • Size 813B
                                                                  • SHA256 a2bfd5746b72c6de19160d53e7f3ed4829726d279b15063bfb8ed4b424b5b08c
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_274773c7-8f57-4df1-a79c-2a0b8779316e.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_274773c7-8f57-4df1-a79c-2a0b8779316e.raw
                                                                  • Size 621B
                                                                  • SHA256 b8b9ba4324e8c0a6580f4eff833a77284b1e137e1077fc09a3ebd7858702dae8
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_274773c7-8f57-4df1-a79c-2a0b8779316e.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_274773c7-8f57-4df1-a79c-2a0b8779316e.raw
                                                                  • Size 845B
                                                                  • SHA256 1771cdb85c40769354003d3dfa2a9838ea9362d1977f5da7220ee1dea2e78dac
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_274773c7-8f57-4df1-a79c-2a0b8779316e.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_274773c7-8f57-4df1-a79c-2a0b8779316e.raw
                                                                  • Size 653B
                                                                  • SHA256 afc23b1cbbcc39f2700815c9124cc260daa16fec5c7791fa4748f9f6d9735846
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 20d5cc7df3bf80cc27b7de271111407480b22e14a2b519c25090bf9e2dc36079
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 a96ba634a3c0012da54293bfe456109f576cad56d38a0e8ce1b23dd91d2be60f
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 16KB
                                                                  • SHA256 88f25e0f7b266a16c64594cb8083ccdda835ff7e8149071abddf9b0689279545
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 16KB
                                                                  • SHA256 8df772d0dc9bc86dc4d88ed5c0628183d16e0eada187bc292481425c320a86c1
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 16KB
                                                                  • SHA256 85bd404a3f46984a08bd394d6a0547f161eb1594a338fc28539c8dc909c662e3
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 11KB
                                                                  • SHA256 37fa5e6e947f0abc4ceceeecc68d46bd64ae8b9c2c74677f1ed30a196f1aa26c
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 12KB
                                                                  • SHA256 a342e67607dc355545b455350aff9b2edfcae6bfbaf610368b55ba71020f0366
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 13KB
                                                                  • SHA256 10391fc7b31a7f9a00a24a7762ff0f3371da49535d92d2b45408774f43821d92
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 e7e190b38301001148a45217cdcda2e739ba12bacb059ba2e2d66a174350dd9b
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 dedcfa2ae3fd8ffd6d041424667f643e6efd241dc419f27383b76c2c1c543436
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 1d59e024d175396690cf030fcfe4cbe3c337820bacb1b15cd5b4c182c3cf1cd8
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 c16f211df55bc6e461a6cd925155e471cc40a93d9553f856d52c37e9ec412f56
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 16KB
                                                                  • SHA256 014cfd9ad304f07154c945a4c96266776424137c3ea90fa830ddc09f10e966cb
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 9KB
                                                                  • SHA256 160ba1c75848dfe167958d8da26b4878f999124430390bfdbff857d10165e367
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 9KB
                                                                  • SHA256 3c717ad5d2ab38b8659eef53c7b5ad7c786c3e4a6b0a0acebfd219e424936885
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 10KB
                                                                  • SHA256 39b575a5c1cb6155f4db81b28fb94c67af6d89a14a58a7f2133fc809a58182c0
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 12KB
                                                                  • SHA256 8b6a0a8fecad9e944fc4c4d7138a4782dd1e8d63535800424a49af6de0e62909
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 11KB
                                                                  • SHA256 88e8f4bf413614fb9c60acec9b3b21807283f819237e4dfc19f9cfa21f8ed5b4
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 12KB
                                                                  • SHA256 ab26ab8336f35458ee6e0b8899e83bf493759e26ee708adcdbd55abbc4695ee2
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 13KB
                                                                  • SHA256 5b7b3288bc38078353c00b2493bd7385e9a04b4dd20d4030d916522b2ea6147c
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 13KB
                                                                  • SHA256 b40f20404ac5eb6c531cad61727e1f91a7fea02618f3df1cdbaf6ae72dcd7c23
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 13KB
                                                                  • SHA256 87dc2fd286bc4c21e7d2d81cd8d860d6b3b4c660f106056e11908922afd58b13
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 13KB
                                                                  • SHA256 0710fbe98b713749b82f8dc15b12661704e9783ae7a769ab892f99e2b50ef79e
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 14KB
                                                                  • SHA256 9af3f5b870efcb09b99150963f9b9319e5e041654c8669d16c710767e1d5f2d3
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 14KB
                                                                  • SHA256 317b773bd05bc74d82b12789010050af8c12d017ecef59b7633f61af46c52ce2
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 4216d90e8c167093503bda7eeabb643b9a633ba98a573db2368000c6d1c61bf2
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 2dc94df57e2e2a3a8d6f5209ef4ed3b4c23bfc5c1e15c442394c9bdabad2c2ca
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 4fa80891ab318f3fca155e193cbeb339d976e9c38708ed5df98c629aeb316851
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 ca2776cb9742acc9c200abf653b417e4353940857928cf18332b3c461b65cf16
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 10KB
                                                                  • SHA256 05cf4b0f0fb645bf015a5fec1f6d42b9467d90a6a948b557c47ead17a9e97c4f
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 9KB
                                                                  • SHA256 9519cea5fdf81aaed28e637efed135281041f19fa974feeaefd17ccd763d9edb
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 9KB
                                                                  • SHA256 dafcf1c0c2a038e61bda26b8b7089411afb26d92d1463fafef63bca9b04cc037
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 9KB
                                                                  • SHA256 83279f989a9072eb4700c56e33855638715bcf825458cec7283ed3df9e71e1bc
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 9KB
                                                                  • SHA256 49d387e40d0d5c084ef958fa29de95c72a2a637a6cf77a472b2026ad4e66d7d5
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 10KB
                                                                  • SHA256 d6c2abb45692f89f9e2b264277c5f277e0adf57c50a9b6ab425a38bd328f9167
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 10KB
                                                                  • SHA256 19ed510492110784660f9d69d06b0c1f5a367236642c06c0b39bc64ea4b07d67
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 10KB
                                                                  • SHA256 be5d558a7272e9b914c4363a93e31bde226d01bf21b3801d18bdc2444058a489
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 10KB
                                                                  • SHA256 da459cc5ef07b2a40c8eef16c012d393e07836dd71e3afbe8a0169f567506493
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 10KB
                                                                  • SHA256 952ac5013832b9898801077441c8796ae104c517977c23356f9e7d12b25ecbd9
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 10KB
                                                                  • SHA256 188984f8935687bcaed54421fafd17a9fa56c4e77dd98d1114e465bd5dca7485
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 10KB
                                                                  • SHA256 d78090eb36adf0ea7d67986466cae6ba18b12e7045924eae807ad3fc41742e21
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 12KB
                                                                  • SHA256 4d848a330fb62d6e936954df93f4fa81cf8d203b603fd1d5d8faa41f0c1769fd
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 11KB
                                                                  • SHA256 9ef95b06597452c39556cb9a240c34f4a771f83ae36598eba535fe3ef07509bc
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 12KB
                                                                  • SHA256 66d3bd71014c89623e2a12774dadc7c1b243ce8b165a92dc9be38183303ba5ba
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 14KB
                                                                  • SHA256 85d0402777bda9094808ce90243ebaa9d4ea6adc8bdf0d7350559d9016f31709
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 14KB
                                                                  • SHA256 48803ac481a0dd027fdc05107380da7f3416761a8240e56c6d09b30cf02bb61e
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 88f6433ff67ec7b43f6c8de0aa11b70632cd71014895c1c880a80dd254f0e7f8
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 f8d286d6645de4e3495606c30900d506a31d9880d478bf9ef5d2cf8b277fa27b
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 1KB
                                                                  • SHA256 9cf0fa51511ae8cc5482edeb1d45322e49e32d728be0af881685b4c4389e2e0f
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 6KB
                                                                  • SHA256 6cf2b09fe5029a473e240ab5839de937ae91a6e34280e9a1edf1b66922fb8cb9
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 6KB
                                                                  • SHA256 8a156e551085ae3a6b93c8e73ca78fad9160cb4735aa64abbbf12f5336382577
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 10KB
                                                                  • SHA256 789821c2a08a41132cfccf665888078450fae161b1b7d71a03b98b5f0c458133
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 10KB
                                                                  • SHA256 35a4422fcb3c408bfe624201762e910d9ad45c257e8ae52f3fcebebcb5696465
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 14KB
                                                                  • SHA256 4f141d100e33082ad02831c1bb8d7f901fbf4e1d0ee3a406bcf5d9c1f176daad
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 fc2df3b472356456a9b04cf37cd8c37316a3d869e5ff3a3b1999b1069331e5d8
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 a41a34c49a3d9e41a20a080fe25e9b4ba06084faece4a5047de12eb1b4180830
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 8cd44be5d7cc02a091de5d301234be378858807c621b11538c29f39d8705427d
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 925B
                                                                  • SHA256 bab4be5d4c868303ebf67f46da6497745d1e0918c76efea8ada7234ae67a9df1
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 621B
                                                                  • SHA256 66e3cf65c479dcae469b6bcab1779610d73f54b6c7a1c943180a53d8c92774b3
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 8KB
                                                                  • SHA256 13a3ef30ca3b93d8cab48f060c7aa3d7e77853db03df0f32ef399be7c85f30bc
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 1KB
                                                                  • SHA256 c7d09d6bed61033e2b2e77a040ab943f0303018c842ef080f270a5ae2212354d
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 1KB
                                                                  • SHA256 b87ec1a0cdf3b374ce6d7f798ffa92f2d5ebd2268283b6358f865abdafe265e2
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 10KB
                                                                  • SHA256 f385fb0d591db27daf4721d86da769841dc068d55038ef91155448fc221ef1bf
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 10KB
                                                                  • SHA256 15b142227e29649a3d655e6b386ab171061e2ee06c5bfaeacad00f50e05aeac6
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 10KB
                                                                  • SHA256 938bbccfa3d8cfa949378ee1281ec8ae2553f36d63a6092a7728ffd14b2819f2
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 11KB
                                                                  • SHA256 b58330a9b72dbe03ee02c5b7dbaa8c2704481c9a44735b1a273662ff38844730
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 12KB
                                                                  • SHA256 5a9b8e223717271a4c714152f803bc37ab00cc958b60dcd225ea110b4d565a03
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 14KB
                                                                  • SHA256 54bcb125c15c5ff83130b10f38456679cd04b3eecf4b628fd2597af52504f550
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 c66762aad8fdc374d0976ea3b918181b793bd59f38f68937d8993b59c5870eb9
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 b1650d01041158b0a0d45da9e4d38412062dbcb512118fa911323ed42c3ead9b
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 7KB
                                                                  • SHA256 69c533d85f052714dd5ffc6045df7b8349bf7c175688bb673f3a9c29188491f8
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 749B
                                                                  • SHA256 f334fddb2c5098e1c20e0d2bd42275b2ec21b011bf358fe713a70886d3ce5547
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 11KB
                                                                  • SHA256 e19e145e3a6ce68537d3c2907af18af1049fd2b0d7f9c30c48689b12bb4c9421
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 8KB
                                                                  • SHA256 3dca92964fe286c18fb9e0e0fd257b8b5db3614f65e16820ab5b568a196afa7e
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 1KB
                                                                  • SHA256 fc7b700ce30959618171fbdfa97d3c79738bbf23852aca35932d7d1815dd5c04
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 8KB
                                                                  • SHA256 2711f4e0a58382738da79b813ae6c8e8969c2447bf16256dac47a2232acc6bd9
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 11KB
                                                                  • SHA256 4dfc4d82c8341be7703b21b6c16ba66f40ed32d0948dfc2f32fc04557aa87da2
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 8d94374556b5651830e0207344ff19a06176f23bb165d8bcd9d5186a64c03f8e
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 11KB
                                                                  • SHA256 f84e0cad977316dea6518f7d1f495c7a271f6d51b53d907d929b7b772c9ad289
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 e985b1bdee6ab04a4c50c28cad56d02d0aa070209070eb9fc6a6d1df9997adb3
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 db531ac07d81b2005a224bbc5dc793a6d81e833f403380acac42510ea4081954
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 16KB
                                                                  • SHA256 0303b532f850e5cc2315999a548bf7b219bc97335c640337671f13b357ff797e
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 9KB
                                                                  • SHA256 a391590a6a498f1d506714edc63514acea8a6fe143354e7a395d7eaa1711e842
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 493B
                                                                  • SHA256 965aa6e3f81b0e38a7293cc552382b2ff6423e349e2b6b0e8d717b41b57e3951
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 1KB
                                                                  • SHA256 8b4752ba34a42777d748d802f616132983c9085e93c2f475823c94929c974aec
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 8KB
                                                                  • SHA256 d33e74c7227e1abbea867c6fb2cd52a7f1db3638125e503329527f8f66893531
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 8KB
                                                                  • SHA256 94d04f9691b5a8dd60bdc5ef016928ab92eadbf722b40e10d0319d0bf4851ad4
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 1KB
                                                                  • SHA256 3cdd8be61452617024e79880f60595d6a7faa9c83dfa8b7319a2460b0c9e7ce3
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 1KB
                                                                  • SHA256 a8ce33ca0ecd2b631fc24be549707f6bd283f19718726498ad4a5359335f8f84
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 10KB
                                                                  • SHA256 080113b527fa27e80f70387e2960d6b5da0abe73de0211542b6a89f44148cf3d
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 7c3cb120b6e4b0831d486e78324515f86e010dd666f32d672b0e01e195ceb8f4
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 11KB
                                                                  • SHA256 4ba62ff7d190bd856bb57c80fafd317eba1c81499ccbe3dd43de3dc95e86ca0e
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 12KB
                                                                  • SHA256 4a52e984a41d8dd4287380de5eb703d5a46b0cb3b511d3b9e82853f8cb79eacc
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 12KB
                                                                  • SHA256 d44700e2835a4eeb9aa1080c912d576f9bafcd5d0731d9966600077fd35c03e0
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 5b5c03a1ee874ab0663b25c2f072e7293e80a37d52fda6f3e05480b37fe8178e
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 10KB
                                                                  • SHA256 17928cf0500db71eb15174015babce946fa93cc9835ec65c36db7b963be26175
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 7KB
                                                                  • SHA256 a1d15441ed5e8b41c130df7a0619020918245657af6e055793377f003bde837f
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 7KB
                                                                  • SHA256 914066fa4b2b2b917141ca861260a4ef5a95e2af1d90f50f87eb5f84a7c05b1a
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 1KB
                                                                  • SHA256 afe564e46d4c7832f7d69a8a613a3cc29a4b76e3aa03336bc1fd35c5460455b8
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 1KB
                                                                  • SHA256 868d08cce657dde142f4539cbbfa67286ebcc133c5cf3816b7a5f3b09ca093ac
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 14KB
                                                                  • SHA256 2f8d6e456297ef5016c84fc2bbe045d6eefb64de4997fd0fad35da658cccff19
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 10KB
                                                                  • SHA256 8bdf267135c334ac2b74b8794cd9f70968cf6190db2eb4a7aa4b9484f317df85
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 10KB
                                                                  • SHA256 1649862368fc140fa13a85d9aaedc5d26a599b5ee0579112fb9fe0c55ef70691
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 ea10ac216bdbba9aea3fd4e5e361d18a2ca52576edfbcbded7fb7fe7ff498a83
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 4778deede5fc73bb929ce0c62d57378b00c3ce7395abe978d6cdf6b7aa59e25c
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 790ac3d4e13570788565a39dd89635ff8e738b745a79478ce215fd5cd7789a41
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 11KB
                                                                  • SHA256 16e3a46909282f5858c6e5b85287798999c840de937ba984e0e8bd574c34fc4e
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 8KB
                                                                  • SHA256 dd3d881782a1c6a22a82c70fea1985113e6a60a871e8fddc7b0c49be46083726
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 8KB
                                                                  • SHA256 298f082a7d30c5bb4495d06a32b6be4e1e183786df86582de3d36771d630e005
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 8KB
                                                                  • SHA256 bf582379fdd6d7384ba945f4ea71b04a728e596baabd4a0ec709fd3c0f42b218
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 10KB
                                                                  • SHA256 6f80bcecbe499fba94a312c7a6844865281ad502b1c4d7dee3e5476cf8a58b1d
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 973B
                                                                  • SHA256 1cc527ac8f64588d5f67937e3918b3841554f229647fd69bf7d1d70e92a332dd
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 10KB
                                                                  • SHA256 9dd86a90bb23adf3748bed4ae73a412b2509d81781af94f674aaceb14f19d2de
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 16KB
                                                                  • SHA256 68dcff7ab4b5b44d58777eb49cb19f103db09126acb7a89e9b6fcf486be9c46b
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 743f122b1dc19cf06ae49397eb4f43c342810923f1e113b5faa0bc3914fb6050
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 12KB
                                                                  • SHA256 64915ecb6a3cdf9b0566229277c61b6b483dd97592cefb6ffc29edf129aa86e8
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 4fab8e363564a76b0d396cc12fdb260531259ee8baf005240d01e10b181bf8b5
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 bf69f10ecf680e69888b236ec478a56a80fdfde4eea83ebfd6e9a7759a12bd6e
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 15KB
                                                                  • SHA256 080acdbf3b4d5c1c060c7de191b3ed158ed46bf98958124661789edb02664edf
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw
                                                                  • Size 16KB
                                                                  • SHA256 0769913dd3f6cabaf7bcca4151c4042bd8ab074d4d8b055abb56ac93d94d2432
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw5168e019-507a-4852-9405-90ae312f644b.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.raw5168e019-507a-4852-9405-90ae312f644b.tmp
                                                                  • Size 13KB
                                                                  • SHA256 7b919f3203e0ff0c7f503e21d086de170d24a1fd30d5b8b627f19171995d1025
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.rawc39aaff1-a7c3-477b-8682-e492d53b429f.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c1900a5a-1d71-40f9-852d-26b3ae03ecde.rawc39aaff1-a7c3-477b-8682-e492d53b429f.tmp
                                                                  • Size 10KB
                                                                  • SHA256 387225fc7fcdf58e0a4e56a9cbcc61e1058ee6872e8d763196ecb6a830b92807
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  session_f4389d5b-c98d-4c1c-a9ea-2a99790b9a71.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f4389d5b-c98d-4c1c-a9ea-2a99790b9a71.raw
                                                                  • Size 493B
                                                                  • SHA256 bb4442727bcd944a1511db0b689db21f6186b9a560b5a13ab4e4764f5f71f424
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_f4389d5b-c98d-4c1c-a9ea-2a99790b9a71.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f4389d5b-c98d-4c1c-a9ea-2a99790b9a71.raw
                                                                  • Size 973B
                                                                  • SHA256 0755861e7ceb932d77ae76550ad3fefbe8b98a12dea6f878b29c3fbb14cf8e1c
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_f4389d5b-c98d-4c1c-a9ea-2a99790b9a71.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f4389d5b-c98d-4c1c-a9ea-2a99790b9a71.raw
                                                                  • Size 1KB
                                                                  • SHA256 bd0220f4a0e2a954d437f950707f4fbe02bfce4bdff710559a6e7cc53334fa82
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_f4389d5b-c98d-4c1c-a9ea-2a99790b9a71.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f4389d5b-c98d-4c1c-a9ea-2a99790b9a71.raw
                                                                  • Size 621B
                                                                  • SHA256 ed4d4399b1fdf133d9f1c02c083a9c353a06550ef2110c0c3c7012b19bb5601d
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_f4389d5b-c98d-4c1c-a9ea-2a99790b9a71.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f4389d5b-c98d-4c1c-a9ea-2a99790b9a71.raw
                                                                  • Size 781B
                                                                  • SHA256 431bc47d9369e5e69481e167886c84c0c8e72a7050090723ed12cd0fe4a6d93d
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_f4389d5b-c98d-4c1c-a9ea-2a99790b9a71.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f4389d5b-c98d-4c1c-a9ea-2a99790b9a71.raw
                                                                  • Size 797B
                                                                  • SHA256 9263261987e720020ddf19cbcc5831ebf0573306b7252bdba72c654649277e77
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_f4389d5b-c98d-4c1c-a9ea-2a99790b9a71.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f4389d5b-c98d-4c1c-a9ea-2a99790b9a71.raw
                                                                  • Size 797B
                                                                  • SHA256 e096bd492e66267f87583dc96af7ebfdb5ae1e7fd55e6683a1c3b2c1a81911d8
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_f4389d5b-c98d-4c1c-a9ea-2a99790b9a71.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f4389d5b-c98d-4c1c-a9ea-2a99790b9a71.raw
                                                                  • Size 1KB
                                                                  • SHA256 c6c12877e8e58159dd29adb8d5e3edbe998ca4a3b12b42b27016ecfec5f5ce6d
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_f4389d5b-c98d-4c1c-a9ea-2a99790b9a71.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f4389d5b-c98d-4c1c-a9ea-2a99790b9a71.raw
                                                                  • Size 1KB
                                                                  • SHA256 e7f576a9ee385a6b8ccc1353ae6f88a8ba80ff19b99459f73734995d8a08f9ef
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_f4389d5b-c98d-4c1c-a9ea-2a99790b9a71.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f4389d5b-c98d-4c1c-a9ea-2a99790b9a71.raw
                                                                  • Size 1KB
                                                                  • SHA256 096462ff775d51626607b901efaff2d9ce45ecd638916788c154d4cc217b9883
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  session_f4389d5b-c98d-4c1c-a9ea-2a99790b9a71.raw
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f4389d5b-c98d-4c1c-a9ea-2a99790b9a71.raw
                                                                  • Size 1KB
                                                                  • SHA256 67ad41c2102a5c908405fed01dbeca4e26c42e91c32f76965d15f80b6b1e5cbb
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  CURRENT
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\CURRENT
                                                                  • Size 16B
                                                                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                  • MD5 SHA1 SHA512
                                                                  Submit Download

                                                                  c2e21064-8196-4f5d-aab1-40b258de05c5.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\c2e21064-8196-4f5d-aab1-40b258de05c5.tmp
                                                                  • Size 203B
                                                                  • SHA256 0d27859bfbc11a1942e54b7ba7cb5622561f2c1eafbcbcac07c2538d79f0195a
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  MANIFEST-000001
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\shared_proto_db\metadata\MANIFEST-000001
                                                                  • Size 41B
                                                                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                  • MD5 SHA1 SHA512
                                                                  Submit Download

                                                                  ssdfp2716.0.244204230
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2716.0.244204230
                                                                  • Size 1KB
                                                                  • SHA256 6f77ff64c01d63b62383c0f665f09bf2c3a2333e3811de016fbfaf62638d79c4
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp2716.0.244204230
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2716.0.244204230
                                                                  • Size 2KB
                                                                  • SHA256 7bee533b8f698b3ae34807c27d6816b000ff37c72e9e4f47bea05f1f4935bf41
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp2716.0.244204230
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2716.0.244204230
                                                                  • Size 265B
                                                                  • SHA256 b7e8c796c640a404922c90eba318356d9cbded18d4f51421e04f1ae3d920c283
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6612.0.428979544
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6612.0.428979544
                                                                  • Size 265B
                                                                  • SHA256 28bd07c863d1b47f8420a8c6c035f37821365584c5661acbf8504be0369177f5
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6612.0.428979544
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6612.0.428979544
                                                                  • Size 2KB
                                                                  • SHA256 721b34371dbdc47725813e4aec6d25c56e4e0b6f47c6f41086ac9a3abcfa1e3c
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6612.0.428979544
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6612.0.428979544
                                                                  • Size 1KB
                                                                  • SHA256 8c3d13354c371cce69abc25ab4fb269faf2071ee92f7b6f65b7507073f181ffb
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.0.1772867198
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.0.1772867198
                                                                  • Size 2KB
                                                                  • SHA256 1549ff81a1c48ebe2c6d8bd45981bdfe77d9539a325f82310a54e12474a828d3
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.0.1772867198
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.0.1772867198
                                                                  • Size 2KB
                                                                  • SHA256 45b0ace46c3e0f70a844d0d19382924d0c8930419c2f71bf2787bf1b2d6c1424
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.0.1772867198
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.0.1772867198
                                                                  • Size 2KB
                                                                  • SHA256 190153bd2b236d24e626687ffe956f3e512ee86d0f18b0b29b4e284c395b10c4
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.0.1772867198
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.0.1772867198
                                                                  • Size 2KB
                                                                  • SHA256 269ade44258e7df4026aec4f88603b2caa4226a83bbaef31173f22fcb8cd1405
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.0.1772867198
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.0.1772867198
                                                                  • Size 2KB
                                                                  • SHA256 0c9c093d1df871c36cf5e3d59946aaf5a8e524b675f9ef862de4d48b95911b77
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.0.1772867198
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.0.1772867198
                                                                  • Size 2KB
                                                                  • SHA256 0581e97ffd7e777d6ad589c62e53fadcabcc37a9efedf9480fa6440957346764
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.0.1772867198
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.0.1772867198
                                                                  • Size 3KB
                                                                  • SHA256 3fd88e8406483d61278913705e85bcae851cbcd3d2756f03a75f4c7347278875
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.0.1772867198
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.0.1772867198
                                                                  • Size 2KB
                                                                  • SHA256 be754c5d8ad40ec4dc9df32e11c2b5e38fdd374cecf025d6fe6b265c84e7d014
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.0.1772867198
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.0.1772867198
                                                                  • Size 1KB
                                                                  • SHA256 da2a220de7508bf4f17d0f53524e77b37d56c686cc597332134e9e73117b8682
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.0.1772867198
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.0.1772867198
                                                                  • Size 469B
                                                                  • SHA256 606c13b0efe0dde2e2af6ed93ed1a677c61939645329a3aaf574f0cf54632c95
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.0.1772867198cabc7f5e-dc93-43a8-be08-937418f75262.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.0.1772867198cabc7f5e-dc93-43a8-be08-937418f75262.tmp
                                                                  • Size 531B
                                                                  • SHA256 8b7b9f81c3ab5711ab02ec53d274ed6508be14538ac8053f225ec0edf6068659
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 1KB
                                                                  • SHA256 4a209cc12d9d660ebb93e11a26831a3a85164b9943eba46c7995e633bfab6404
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 1KB
                                                                  • SHA256 9967e78d60f5c897d43769555a41b507fd93d2014a621bbf23c1443be559f8d7
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 1KB
                                                                  • SHA256 53757df46b5b61ac09434fa66047736f665408bd30176e6845e166bb9152e04d
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 1KB
                                                                  • SHA256 7365e34060684ec44da9223699ced2cbd8b8eb97c1dc1a12f8383a19025cc7f9
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 1KB
                                                                  • SHA256 a0c722567e8cfc3e46177cad67f99545dbbf21a0ac420e070a3f19e484afe750
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 1KB
                                                                  • SHA256 1fe4109630aa9e096b542c658fa1d1aada5e1712c3445e3f8c95f3ecc4c7811e
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 1KB
                                                                  • SHA256 0a0aae7b52cec05ee7f456cf8dbfa450d2699835f40e5085c173dee198467098
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 1KB
                                                                  • SHA256 591bfb9c3c858b6b095b7d998ff2b0e115fc61a487a225258f6333b86bc31f62
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 224B
                                                                  • SHA256 6ac61a5c6ad9e9abdf898f546dc6abb69ce9cf80a9c8f635ef17f7e50fbad814
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 570B
                                                                  • SHA256 08653016ef774dbde4c78655569936a13659452d7be7a3fa6b6a79957c0c0884
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 660B
                                                                  • SHA256 386d485c44a1fd2619f329bb12c97a1bd642899c42b2f7f3db49ed4a2d10d95a
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 840B
                                                                  • SHA256 7b914fde775c219152b63a0a8aa242b97b6e2af04918e8a1d57b4ae93e3dfa41
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 936B
                                                                  • SHA256 b6920b966877181371ccf56155c2bec7144f2057202c794a8ddbdf3d3d9b0b5a
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 1KB
                                                                  • SHA256 b9af32d92b67db1c457f7a7081dc9c05490679721a83d4c8299163835f2fec62
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 1KB
                                                                  • SHA256 7ed38861d6318934c65e85ca1e1065a07f14f65232f95906e61b57f3b149b846
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 1KB
                                                                  • SHA256 910e84fcf1205041ba7a9bee67e7376e00e6c4e4b8d04adbb9b0eedd9a31b93e
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 379B
                                                                  • SHA256 abe5add80d277612dcf38541dddd3bb3a25930bb7bbae74e68245df20a7e2068
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 746B
                                                                  • SHA256 57da016a68f9a5ae589acdba2838f5c4e56397268f79b6f37b23a9575ecce325
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 1KB
                                                                  • SHA256 95573e592e36f6453c91046d23c4e3512aaedf2b7953d089a2419a8d7428d79e
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 1KB
                                                                  • SHA256 d75739aa587166e57489008ecf81b1caed8aa38112d2a1bfab6c241b42ce00e8
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 1KB
                                                                  • SHA256 514cd4dfcb0934ab6e94b77a952b6e3efaf022ab9dbace66b66c04f1db49e113
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 1KB
                                                                  • SHA256 f919b6104ec214d8d47a9605c28c7092bb0dea60aa5920e48d6a789ea5aa5ee4
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 200B
                                                                  • SHA256 19841e934a662ed8095301573f8c2dc314be9878d25faeac25562446212c9cc0
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 472B
                                                                  • SHA256 4e17a176c6fd821e94acb48c6914750f0f1c241567ce14684dc465a083d9e406
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 1KB
                                                                  • SHA256 22440356f55c12d838166ac921e9c0ebb8043cdd3485d129129b1e38f8c47caf
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  ssdfp6920.1.1646898677
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6920.1.1646898677
                                                                  • Size 1KB
                                                                  • SHA256 f944d3271e2c918e8a16d6cb5176b486e0c84319f0e3fd6d9739ae3f9186d038
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  suggestions_cache.jsonaec95953-d060-40bb-b17c-7bdf759d5df2.tmp
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.jsonaec95953-d060-40bb-b17c-7bdf759d5df2.tmp
                                                                  • Size 652KB
                                                                  • SHA256 c664e285e5cd71aa63effe5bf03281b25e8d1bbf0256e6b6655e084edd4740cc
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  data_1
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
                                                                  • Size 264KB
                                                                  • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                  Submit Download

                                                                  Local State
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                  • Size 5KB
                                                                  • SHA256 df88344ccb0c52c63569e0a0eb18b2be761d025e4d169089471aed603f70e6b2
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  Local State
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                  • Size 5KB
                                                                  • SHA256 28eaaef88d480ef1357f9b66e940e61f8a19de3dae596feaf34da3a3c29c826b
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  Local State
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                  • Size 2KB
                                                                  • SHA256 ab515a19405b4f67c0ce14b4df2f744e731113cde427e577bedec693b8c47066
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  Local State
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                  • Size 3KB
                                                                  • SHA256 7a7fccd0985945051a14fadabbf3a79d863c304493e1d3bf8807541ff6dc30f8
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  Local State
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                  • Size 4KB
                                                                  • SHA256 fba6422cfdfcdcb2c59f1f751fe32331856427df4b19b377cde4f9270d789707
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  VariationsSeedV2
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                  • Size 19B
                                                                  • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                                  • MD5 SHA1 SHA512
                                                                  Submit Download

                                                                  VariationsSeedV2
                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                  • Size 11B
                                                                  • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                                  • MD5 SHA1 SHA512
                                                                  Submit Download

                                                                  opera-one-dark.jpg
                                                                  • Path C:\Windows\SystemTemp\scoped_dir6920_1871368143\opera-one-dark.jpg
                                                                  • Size 349KB
                                                                  • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  persona.ini
                                                                  • Path C:\Windows\SystemTemp\scoped_dir6920_1871368143\persona.ini
                                                                  • Size 217B
                                                                  • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  opera-one.jpg
                                                                  • Path C:\Windows\SystemTemp\scoped_dir6920_404807353\opera-one.jpg
                                                                  • Size 194KB
                                                                  • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  Submit Download

                                                                  persona.ini
                                                                  • Path C:\Windows\SystemTemp\scoped_dir6920_404807353\persona.ini
                                                                  • Size 207B
                                                                  • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  Submit Download

                                                                  memory/4820-3584-0x000002527FC50000-0x000002527FC51000-memory.dmp
                                                                  Download

                                                                  memory/4820-3586-0x000002527FC50000-0x000002527FC51000-memory.dmp
                                                                  Download

                                                                  memory/4820-3594-0x000002527FC50000-0x000002527FC51000-memory.dmp
                                                                  Download

                                                                  memory/4820-3590-0x000002527FC50000-0x000002527FC51000-memory.dmp
                                                                  Download

                                                                  memory/4820-3595-0x000002527FC50000-0x000002527FC51000-memory.dmp
                                                                  Download

                                                                  memory/4820-3593-0x000002527FC50000-0x000002527FC51000-memory.dmp
                                                                  Download

                                                                  memory/4820-3592-0x000002527FC50000-0x000002527FC51000-memory.dmp
                                                                  Download

                                                                  memory/4820-3591-0x000002527FC50000-0x000002527FC51000-memory.dmp
                                                                  Download

                                                                  memory/5376-504-0x00007FFF8B0B0000-0x00007FFF8B0B1000-memory.dmp
                                                                  Download

                                                                  memory/5376-505-0x00007FFF899A0000-0x00007FFF899A1000-memory.dmp
                                                                  Download