Overview

overview

8

Static

static

8

OperaInsta...2).exe

windows10-ltsc_2021-x64

8

OperaInsta...2).exe

windows11-21h2-x64

7

OperaInsta...2).exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260911-en
  • resource tags

    arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    04/10/2026, 23:21

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaInstaller (2).exe
  • Size 178KB
  • Sample261004-3cc36sttd1
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Writes a Windows system DLL name to a user directory 2 TTPs 2 IoCs

    A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

    defense_evasion
  • Adds Run key to start application 2 TTPs 3 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 18 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 11 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 5 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 43 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller (2).exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller (2).exe"
    1⤵
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2248
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:3112
      • C:\Users\Admin\AppData\Local\Temp\7zS82C3A298\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS82C3A298\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
        3⤵
        • Executes dropped EXE
        • Enumerates connected drives
        • Reads the TCP/IP host and domain name from the registry
        • Enumerates system info in registry
        • Modifies system certificate store
        • Suspicious use of WriteProcessMemory
        PID:4256
        • C:\Users\Admin\AppData\Local\Temp\7zS82C3A298\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS82C3A298\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff70cf66998,0x7ff70cf669a8,0x7ff70cf669b8
          4⤵
          • Executes dropped EXE
          PID:4724
        • C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:892
        • C:\Users\Admin\AppData\Local\Temp\7zS82C3A298\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zS82C3A298\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=4256 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\opera_package_20261005002203" --session-guid=6a9b4d22-deed-449a-9970-2cafb9b02f71 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=B408000000000000
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Suspicious use of WriteProcessMemory
          PID:220
          • C:\Users\Admin\AppData\Local\Temp\7zS82C3A298\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zS82C3A298\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff70cf66998,0x7ff70cf669a8,0x7ff70cf669b8
            5⤵
            • Executes dropped EXE
            PID:580
          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe" --backend --initial-pid=4256 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\opera_package_202610050022031" --session-guid=6a9b4d22-deed-449a-9970-2cafb9b02f71 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=136.0.6008.80
            5⤵
            • Executes dropped EXE
            • Enumerates connected drives
            • Enumerates system info in registry
            • Modifies registry class
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of WriteProcessMemory
            PID:4912
            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x29c,0x2a0,0x2a4,0x274,0x2a8,0x7ff60bb96998,0x7ff60bb969a8,0x7ff60bb969b8
              6⤵
              • Executes dropped EXE
              PID:4460
            • C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\opera_package_202610050022031\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\opera_package_202610050022031\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Writes a Windows system DLL name to a user directory
              • Adds Run key to start application
              • System Location Discovery: System Language Discovery
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:2388
              • C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\opera_package_202610050022031\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\opera_package_202610050022031\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x7dc9cc,0x7dc9d8,0x7dc9e4
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:4076
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Enumerates system info in registry
                • Suspicious use of WriteProcessMemory
                PID:2544
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x2fc9cc,0x2fc9d8,0x2fc9e4
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:2108
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Reads the TCP/IP host and domain name from the registry
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:1700
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:1160
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x25c,0x260,0x264,0x258,0x268,0x7ffe4084bdb0,0x7ffe4084bdc0,0x7ffe4084bdd0
                      10⤵
                      • Executes dropped EXE
                      PID:1140
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:3424
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x258,0x25c,0x260,0x254,0x268,0x7ffe4084bdb0,0x7ffe4084bdc0,0x7ffe4084bdd0
                      10⤵
                      • Executes dropped EXE
                      PID:3760
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x290,0x294,0x298,0x268,0x29c,0x767324,0x767330,0x76733c
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:4144
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:3772
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffe4084bdb0,0x7ffe4084bdc0,0x7ffe4084bdd0
                        11⤵
                        • Executes dropped EXE
                        PID:4008
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:2152
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x25c,0x260,0x264,0x258,0x268,0x7ffe4084bdb0,0x7ffe4084bdc0,0x7ffe4084bdd0
                        11⤵
                        • Executes dropped EXE
                        PID:4164
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:3656
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x25c,0x260,0x264,0x258,0x268,0x7ffe4084bdb0,0x7ffe4084bdc0,0x7ffe4084bdd0
                        11⤵
                        • Executes dropped EXE
                        PID:2596
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\opera_package_202610050022031\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:3960
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffe4084bdb0,0x7ffe4084bdc0,0x7ffe4084bdd0
                7⤵
                • Executes dropped EXE
                PID:2384
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1768,i,18200699098727685611,14419598080233340750,262144 --field-trial-handle=1944,i,9308406281382427738,5114256345070915484,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1948,i,14496460825606876173,10789716275151118368,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1940 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:2340
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2072,i,14657878183945734866,3857508430189913826,524288 --field-trial-handle=1944,i,9308406281382427738,5114256345070915484,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1948,i,14496460825606876173,10789716275151118368,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2080 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                PID:2540
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2516,i,11801137152031640604,17891558027853099757,524288 --field-trial-handle=1944,i,9308406281382427738,5114256345070915484,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1948,i,14496460825606876173,10789716275151118368,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2528 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:3824
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3892,i,1299819890577664467,18406064867856887324,2097152 --field-trial-handle=1944,i,9308406281382427738,5114256345070915484,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1948,i,14496460825606876173,10789716275151118368,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3912 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5496
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4328,i,14016595128977101617,15134122458108703168,524288 --field-trial-handle=1944,i,9308406281382427738,5114256345070915484,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1948,i,14496460825606876173,10789716275151118368,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4380 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:5708
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4440,i,7421605792860542871,3639772596485279960,2097152 --field-trial-handle=1944,i,9308406281382427738,5114256345070915484,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1948,i,14496460825606876173,10789716275151118368,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4488 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5804
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4468,i,628482685191444042,6459042782362732039,524288 --field-trial-handle=1944,i,9308406281382427738,5114256345070915484,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1948,i,14496460825606876173,10789716275151118368,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4324 /prefetch:12
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:1368
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4212,i,15178491569937043338,12603810452924572433,524288 --field-trial-handle=1944,i,9308406281382427738,5114256345070915484,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1948,i,14496460825606876173,10789716275151118368,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4508 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:3332
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4336,i,15210462108193434781,3160542823458988542,524288 --field-trial-handle=1944,i,9308406281382427738,5114256345070915484,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1948,i,14496460825606876173,10789716275151118368,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4988 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6068
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:2020
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffe4084bdb0,0x7ffe4084bdc0,0x7ffe4084bdd0
                7⤵
                • Executes dropped EXE
                PID:6092
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1676,i,9560959384648310482,1523740059633342005,262144 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2184 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:1132
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1904,i,11697982484689110458,9465111399654825460,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2212 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                • Enumerates system info in registry
                PID:5940
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2504,i,2408189286883570707,5404003888751649635,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2496 /prefetch:13
                7⤵
                • Executes dropped EXE
                PID:4964
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3124,i,8000672041951105011,8530096517001649298,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3172 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:3584
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3164,i,2240865665770888539,11446349441542837612,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3260 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5388
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3196,i,7718415047699057068,10877395532938928571,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3280 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4680
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3224,i,10967075226529161144,14605304985490877556,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3300 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:5012
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3112,i,4965587624017832938,11162863633440431386,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3092 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:1428
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3136,i,10560763287824719442,617150804903302973,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3204 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:1876
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3148,i,3404209232722344745,6310606217355007078,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3236 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:2540
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3368,i,1105309674555533530,15364755263733292090,2097152 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3388 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:4612
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_gx_splash.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                7⤵
                • Executes dropped EXE
                • Modifies registry class
                • Suspicious use of AdjustPrivilegeToken
                PID:5812
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4752,i,5708389891351904343,13092508807930710297,2097152 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4756 /prefetch:9
                7⤵
                • Executes dropped EXE
                PID:1368
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4912,i,9171892792679205738,5164851760886982415,2097152 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4932 /prefetch:1
                7⤵
                • Executes dropped EXE
                PID:2088
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5280,i,15807049887346053105,18315440484726866012,2097152 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5288 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:4504
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5420,i,5181723756108427736,13052741729463467731,2097152 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=4904 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:4716
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6316,i,12162946141261119949,905071411073963850,2097152 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6324 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:2504
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6828,i,17373577205224148543,9253962839141599850,2097152 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6880 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:5976
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6996,i,1392530775887004415,9984137153131012976,2097152 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6712 /prefetch:9
                7⤵
                • Executes dropped EXE
                PID:5984
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6764,i,10944041978348601217,10330753963528461180,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=7028 /prefetch:12
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6628
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6852,i,16164250529772525306,12698123290602650529,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7264 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:6828
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7272,i,16312708288852650104,9967973326258033271,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6856 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6840
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7396,i,7559579088986139124,14495403420917986911,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7408 /prefetch:14
                7⤵
                • Enumerates system info in registry
                PID:6848
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7560,i,4055887304161040911,3771437173453454961,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7584 /prefetch:14
                7⤵
                • Enumerates system info in registry
                PID:6864
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7596,i,13258481490800032335,9697094381134257885,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7724 /prefetch:14
                7⤵
                • Enumerates system info in registry
                PID:6876
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7256,i,12723854721326187585,12690833535233288972,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7748 /prefetch:14
                7⤵
                  PID:6884
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8024,i,3980759865302836077,12187013830188823828,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8088 /prefetch:14
                  7⤵
                    PID:7048
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8028,i,5776244319013868781,11927701811064991144,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8064 /prefetch:14
                    7⤵
                    • Enumerates system info in registry
                    PID:7056
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8316,i,5342903315909847985,10536881721371379054,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8036 /prefetch:14
                    7⤵
                      PID:7072
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8356,i,7574948876650337820,17628572135635589220,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8472 /prefetch:14
                      7⤵
                        PID:7100
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8480,i,892467548657879856,8083896935087956934,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8500 /prefetch:14
                        7⤵
                          PID:7108
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8608,i,1671899226478978395,11864915567139873530,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8756 /prefetch:14
                          7⤵
                          • Enumerates system info in registry
                          PID:7124
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8640,i,1523149401525269981,15725552150758346865,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8780 /prefetch:14
                          7⤵
                            PID:7132
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8768,i,5726156164880050703,11605487754666001516,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8808 /prefetch:14
                            7⤵
                              PID:7148
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8800,i,6638000727914753459,6432715711241264146,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9048 /prefetch:14
                              7⤵
                              • Enumerates system info in registry
                              PID:7156
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9304,i,13420906925707167652,17325411385208152788,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9300 /prefetch:14
                              7⤵
                                PID:3212
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9336,i,17673209766962497439,6271890105310600209,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9356 /prefetch:14
                                7⤵
                                • Enumerates system info in registry
                                PID:2364
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=9628,i,11913313608076713020,16471984071781255157,2097152 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9676 /prefetch:9
                                7⤵
                                • Enumerates system info in registry
                                PID:6396
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9684,i,16246883718953864876,10783261516149905005,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9796 /prefetch:14
                                7⤵
                                • Enumerates system info in registry
                                PID:5528
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=9932,i,9145914309701780284,11407593239561923570,2097152 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9936 /prefetch:1
                                7⤵
                                • Enumerates system info in registry
                                PID:5780
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10576,i,7001616670932427613,8464480410814729089,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10568 /prefetch:14
                                7⤵
                                • Enumerates system info in registry
                                PID:6980
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9648,i,5988195142159486979,14963898097557393549,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10756 /prefetch:14
                                7⤵
                                • Enumerates system info in registry
                                PID:5768
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9664,i,3491794485810333151,5192485592686861142,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=9624 /prefetch:14
                                7⤵
                                • Enumerates system info in registry
                                PID:6052
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10960,i,3142618294805117036,2385338899205820202,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=9984 /prefetch:14
                                7⤵
                                  PID:5508
                                • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                  7⤵
                                  • Reads the TCP/IP host and domain name from the registry
                                  • Enumerates system info in registry
                                  PID:8156
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                    C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x284,0x288,0x28c,0x260,0x290,0x7ff6dcb15598,0x7ff6dcb155a8,0x7ff6dcb155b8
                                    8⤵
                                      PID:5480
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11132,i,2255882558453514164,11398815946325994922,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11144 /prefetch:14
                                    7⤵
                                      PID:1436
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11200,i,12112204014893888877,16277042703000528381,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11208 /prefetch:14
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:6768
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11192,i,3248330381944608358,6780843951995425092,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=11348 /prefetch:14
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:6504
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=11632,i,14836126721225500032,4431717804471450429,2097152 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=11684 /prefetch:1
                                      7⤵
                                        PID:7200
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11824,i,861750447924242552,6667475881613600589,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=11832 /prefetch:14
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:6412
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7356,i,16252126611357161170,4438502893404729372,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=7320 /prefetch:14
                                        7⤵
                                          PID:6184
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3392,i,7341977765197268209,10226388694899066386,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=7328 /prefetch:14
                                          7⤵
                                          • Enumerates system info in registry
                                          PID:7732
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11820,i,8230933122826382658,3131316842925490815,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=3212 /prefetch:14
                                          7⤵
                                          • Enumerates system info in registry
                                          PID:7800
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7324,i,16896826124644519405,16000003327686646274,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=7300 /prefetch:14
                                          7⤵
                                          • Enumerates system info in registry
                                          PID:8036
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=3752,i,11542624597939530819,11399106213353372412,2097152 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=6576 /prefetch:9
                                          7⤵
                                          • Enumerates system info in registry
                                          PID:5356
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3824,i,11349209948733181986,2737026559159675737,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=3728 /prefetch:14
                                          7⤵
                                            PID:1120
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6496,i,7140047394586437790,10481065776603291452,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=11936 /prefetch:14
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:5172
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3716,i,16645837431559240887,11300076153326133151,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=3152 /prefetch:14
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:6228
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9260,i,9379691928310819692,2512783388536911688,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=9236 /prefetch:14
                                            7⤵
                                              PID:4252
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=4532,i,4185564226936152311,17354502349468039385,2097152 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=4520 /prefetch:9
                                              7⤵
                                              • Enumerates system info in registry
                                              PID:5656
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3092,i,6115099522790147864,8949635418192278042,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=10840 /prefetch:14
                                              7⤵
                                              • Enumerates system info in registry
                                              PID:4140
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=9924,i,2440951915906133651,2106260233313164573,2097152 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=11092 /prefetch:9
                                              7⤵
                                              • Enumerates system info in registry
                                              PID:8084
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=9968,i,18101600407473362349,7205482845461934925,2097152 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=10832 /prefetch:9
                                              7⤵
                                                PID:8004
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7060,i,932306805073859755,14320674014894709494,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=4020 /prefetch:14
                                                7⤵
                                                • Enumerates system info in registry
                                                PID:3168
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7052,i,12659836053193349807,17675199781309345452,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=6696 /prefetch:14
                                                7⤵
                                                  PID:2272
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=11120,i,16945856672273836445,4990683886439547650,2097152 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=9924 /prefetch:9
                                                  7⤵
                                                    PID:3332
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7072,i,12890682184750030396,4913540451860343745,524288 --field-trial-handle=2188,i,9592795986926814851,2382446205263485570,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2192,i,8194692752356650509,11568770560270413986,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=3276 /prefetch:14
                                                    7⤵
                                                      PID:6156
                                              • C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\opera_package_202610050022031\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe
                                                "C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\opera_package_202610050022031\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe"
                                                4⤵
                                                • Executes dropped EXE
                                                • Writes a Windows system DLL name to a user directory
                                                • System Location Discovery: System Language Discovery
                                                PID:1680
                                              • C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\opera_package_202610050022031\assistant\assistant_installer.exe
                                                "C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\opera_package_202610050022031\assistant\assistant_installer.exe" --version
                                                4⤵
                                                • Executes dropped EXE
                                                • Loads dropped DLL
                                                • System Location Discovery: System Language Discovery
                                                • Suspicious use of WriteProcessMemory
                                                PID:1776
                                                • C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\opera_package_202610050022031\assistant\assistant_installer.exe
                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\opera_package_202610050022031\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x7dc9cc,0x7dc9d8,0x7dc9e4
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • System Location Discovery: System Language Discovery
                                                  PID:2096
                                        • C:\Windows\system32\wbem\unsecapp.exe
                                          C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                          1⤵
                                            PID:5492
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                            1⤵
                                            • Executes dropped EXE
                                            • Loads dropped DLL
                                            • Enumerates system info in registry
                                            • Suspicious use of WriteProcessMemory
                                            PID:5736
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                                              C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffe4084bdb0,0x7ffe4084bdc0,0x7ffe4084bdd0
                                              2⤵
                                              • Executes dropped EXE
                                              PID:5972
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                            C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                            1⤵
                                            • Reads the TCP/IP host and domain name from the registry
                                            PID:5500
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                              C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x280,0x284,0x288,0x218,0x28c,0x7ff6dcb15598,0x7ff6dcb155a8,0x7ff6dcb155b8
                                              2⤵
                                                PID:7356
                                              • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                2⤵
                                                  PID:7584

                                              Network

                                                    MITRE ATT&CK Enterprise v16

                                                    Reconnaissance

                                                    Resource Development

                                                    Initial Access

                                                    Execution

                                                    Persistence

                                                    Boot or Logon Autostart Execution

                                                    1
                                                    T1547

                                                    Registry Run Keys / Startup Folder

                                                    1
                                                    T1547.001

                                                    Event Triggered Execution

                                                    1
                                                    T1546

                                                    Component Object Model Hijacking

                                                    1
                                                    T1546.015

                                                    Hijack Execution Flow

                                                    1
                                                    T1574

                                                    DLL Search Order Hijacking

                                                    1
                                                    T1574.001

                                                    Privilege Escalation

                                                    Boot or Logon Autostart Execution

                                                    1
                                                    T1547

                                                    Registry Run Keys / Startup Folder

                                                    1
                                                    T1547.001

                                                    Event Triggered Execution

                                                    1
                                                    T1546

                                                    Component Object Model Hijacking

                                                    1
                                                    T1546.015

                                                    Hijack Execution Flow

                                                    1
                                                    T1574

                                                    DLL Search Order Hijacking

                                                    1
                                                    T1574.001

                                                    Defense Evasion

                                                    Hijack Execution Flow

                                                    1
                                                    T1574

                                                    DLL Search Order Hijacking

                                                    1
                                                    T1574.001

                                                    Masquerading

                                                    1
                                                    T1036

                                                    Match Legitimate Name or Location

                                                    1
                                                    T1036.005

                                                    Modify Registry

                                                    3
                                                    T1112

                                                    Subvert Trust Controls

                                                    1
                                                    T1553

                                                    Install Root Certificate

                                                    1
                                                    T1553.004

                                                    Credential Access

                                                    Credentials from Password Stores

                                                    1
                                                    T1555

                                                    Credentials from Web Browsers

                                                    1
                                                    T1555.003

                                                    Unsecured Credentials

                                                    1
                                                    T1552

                                                    Credentials In Files

                                                    1
                                                    T1552.001

                                                    Discovery

                                                    Peripheral Device Discovery

                                                    1
                                                    T1120

                                                    Query Registry

                                                    5
                                                    T1012

                                                    System Information Discovery

                                                    4
                                                    T1082

                                                    System Location Discovery

                                                    1
                                                    T1614

                                                    System Language Discovery

                                                    1
                                                    T1614.001

                                                    System Network Configuration Discovery

                                                    1
                                                    T1016

                                                    System Time Discovery

                                                    1
                                                    T1124

                                                    Lateral Movement

                                                    Collection

                                                    Data from Local System

                                                    1
                                                    T1005

                                                    Command and Control

                                                    Exfiltration

                                                    Impact

                                                    Replay Monitor

                                                    Loading Replay Monitor...

                                                    Downloads

                                                    E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                    • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                    • Size 471B
                                                    • SHA256 7e66f0dcf8efad0850d651b6695b39dcfd15c53d2b5bf8a7303855a357696be9
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                    • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                    • Size 416B
                                                    • SHA256 9602f171542a68e8ff285bfc3d1623c18e44dc7d9c45f0a154178f295812ac51
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    f_000001
                                                    • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
                                                    • Size 163KB
                                                    • SHA256 57cb46be654167b43a4072730d034fdcde41f0ccda24da958bd6321c4b8aa1ce
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    snapshot-new.baf
                                                    • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\No_Vary_Search\snapshot-new.baf
                                                    • Size 20B
                                                    • SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
                                                    • MD5 SHA1 SHA512
                                                    Submit Download

                                                    136.0.6008.80.manifest
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\136.0.6008.80.manifest
                                                    • Size 225B
                                                    • SHA256 0b42e2f6e44cb617486730d36045d7eafdb43c83e473dc2446fc266e3091fd12
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    150x150Logo.scale-100.png
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-100.png
                                                    • Size 1KB
                                                    • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    150x150Logo.scale-100_contrast-white.png
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-100_contrast-white.png
                                                    • Size 1KB
                                                    • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    150x150Logo.scale-140.png
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-140.png
                                                    • Size 1KB
                                                    • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    150x150Logo.scale-140_contrast-white.png
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-140_contrast-white.png
                                                    • Size 1KB
                                                    • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    150x150Logo.scale-180.png
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-180.png
                                                    • Size 1KB
                                                    • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    150x150Logo.scale-180_contrast-white.png
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-180_contrast-white.png
                                                    • Size 1KB
                                                    • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    150x150Logo.scale-80.png
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-80.png
                                                    • Size 827B
                                                    • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    150x150Logo.scale-80_contrast-white.png
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-80_contrast-white.png
                                                    • Size 799B
                                                    • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    70x70Logo.scale-100.png
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-100.png
                                                    • Size 781B
                                                    • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    70x70Logo.scale-100_contrast-white.png
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-100_contrast-white.png
                                                    • Size 752B
                                                    • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    70x70Logo.scale-140.png
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-140.png
                                                    • Size 991B
                                                    • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    70x70Logo.scale-140_contrast-white.png
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-140_contrast-white.png
                                                    • Size 865B
                                                    • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    70x70Logo.scale-180.png
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-180.png
                                                    • Size 1KB
                                                    • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    70x70Logo.scale-180_contrast-white.png
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-180_contrast-white.png
                                                    • Size 1KB
                                                    • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    70x70Logo.scale-80.png
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-80.png
                                                    • Size 590B
                                                    • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    70x70Logo.scale-80_contrast-white.png
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-80_contrast-white.png
                                                    • Size 519B
                                                    • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    assistant_package
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\assistant_package
                                                    • Size 3.6MB
                                                    • SHA256 48fb4ec141322aa1e753876ce4105ac61735f7c0d744a73ff4a209e09ab2b023
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    d3dcompiler_47.dll
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\d3dcompiler_47.dll
                                                    • Size 4.5MB
                                                    • SHA256 c0e3f27b85a7717c807d862b7e64b1599a6a8827cc47d671856ce03a3b04fa44
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    dxcompiler.dll
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\dxcompiler.dll
                                                    • Size 24.6MB
                                                    • SHA256 3d67684140102197b12b6748e24ba4cd33af2e14876eb981bfd0c24a2c6ac569
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    dxil.dll
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\dxil.dll
                                                    • Size 1.5MB
                                                    • SHA256 ba28de1e6e486ab1ad22e6a2eab96bbb7c34a251134f4aab17013571b1245dfd
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    files_list
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\files_list
                                                    • Size 6KB
                                                    • SHA256 025d2bcd28ea1b90db693e54070ea99536e11ca16933896673db16bf498ece34
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    headless_command_resources.pak
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\headless_command_resources.pak
                                                    • Size 2KB
                                                    • SHA256 90e398ef08a0178d1efd373addb5070a551011be8b9d27fcc2f234e430a8ad98
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    icudtl.dat
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\icudtl.dat
                                                    • Size 10.4MB
                                                    • SHA256 f11071c692e85689891070cb6f68120dc1a49941325325f7e5b017af42483e72
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    installer.exe
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe
                                                    • Size 8.3MB
                                                    • SHA256 a49318e66f5c3d66c8e2c09f0879eafb87f8d3c03152db579baafd5e5a744279
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    installer_helper_64.exe
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer_helper_64.exe
                                                    • Size 601KB
                                                    • SHA256 3701dd526b94855901ed47b4cc0ddd7810af5eac7aceb43fd8a4fef2fac1b4cc
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    libEGL.dll
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\libEGL.dll
                                                    • Size 460KB
                                                    • SHA256 9a596bc1cae71bf1a53d83316a9e23cdf61283f160b227267dc6364ff0f269ce
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    libGLESv2.dll
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\libGLESv2.dll
                                                    • Size 460KB
                                                    • SHA256 e8eb8bf566654d5d6afb83ecfc99900381a7297d8e45f1c9fcb1a776b82a0b56
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    bg.pak
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\bg.pak
                                                    • Size 1021KB
                                                    • SHA256 7958eea00f4ef14a9b3a9021b87ae4cdace36ca171d6487e09427c980925066a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    bn.pak
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\bn.pak
                                                    • Size 1.3MB
                                                    • SHA256 6307636ac68ea9742dba9dcafd1a6cba2c086be46c25fc10c9392a083f67a763
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    ca.pak
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\ca.pak
                                                    • Size 642KB
                                                    • SHA256 0cb115bf30541172098fb7a542713d2a86607e1c9f6c36e459015f0b2cc2876c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    cs.pak
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\cs.pak
                                                    • Size 641KB
                                                    • SHA256 b8a82ad00c2a033704cf0a9b6a20d4c48f61cab7d6fafd60d5ed7120946d0a64
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    da.pak
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\da.pak
                                                    • Size 590KB
                                                    • SHA256 1d767d2231eeaf346ee7d5eafceaef5884df41666cafa057ec9784da278a75c1
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    de.pak
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\de.pak
                                                    • Size 639KB
                                                    • SHA256 ed7fd31b1e80c5de13e985a0c15becf8c99f6bc153891c853e144a05b1bf603f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    el.pak
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\el.pak
                                                    • Size 1.1MB
                                                    • SHA256 fa8f4b42f21b74e386c88f66aa6802076e78da4e442fd74d875cbccd6af00419
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    en-GB.pak
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\en-GB.pak
                                                    • Size 518KB
                                                    • SHA256 6f735948c21e15f796292e92dda0f4820982774f9b3adfd31a6a3c11284783fc
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    en-US.pak
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\en-US.pak
                                                    • Size 521KB
                                                    • SHA256 43d287ec974b976f98ebc934b980e24628da839fea1fe53f61977420367a7501
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    es-419.pak
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\es-419.pak
                                                    • Size 630KB
                                                    • SHA256 7f07e8900a74b37f8032067b09648ac9f23d4f70c545411c95a146077fa69b41
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    browser_assistant.exe
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                    • Size 5.3MB
                                                    • SHA256 f399f3c94ce8b3d6666a8f19a0c33d1e3e0b09ceef4887d323e7c4a35cfbd686
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    opera_autoupdate.exe
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                    • Size 7.4MB
                                                    • SHA256 a489b9d34fa948893ed054746ac6bbd7ab8f160f723c6eefbba9226bc3efc699
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    installer_prefs.json.backup
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json.backup
                                                    • Size 1KB
                                                    • SHA256 9614212a31392707bbf09f84d79634a3aec87d55687464ced15f60feb8a85f50
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    installer_prefs.json25963ed8-f87a-4aa4-a9dc-f4ce21d62332.tmp
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json25963ed8-f87a-4aa4-a9dc-f4ce21d62332.tmp
                                                    • Size 1KB
                                                    • SHA256 fa521575b7fe3c26a5287590122ef58722f7bd77b915cafdfa294839f9a3fefd
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    opera.exe
                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    • Size 3.4MB
                                                    • SHA256 0dfe554610f3224f31239479931f1b1a5addac7c3068ab8d39ee72f90b78aa7e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    Opera Browser.lnk
                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\opera_package_202610050022031\Opera Browser.lnk
                                                    • Size 1KB
                                                    • SHA256 4441ca58852052365d98a3381631e8fe70c4b3ec2cd2efd01b231f7d86c9ea1d
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    additional_file0.tmp
                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\opera_package_202610050022031\additional_file0.tmp
                                                    • Size 2.9MB
                                                    • SHA256 30786977e61add36f7c641facfb7fce1b2ec7c2a0a7e055a172f127a68788556
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    assistant_installer.exe
                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\opera_package_202610050022031\assistant\assistant_installer.exe
                                                    • Size 2.4MB
                                                    • SHA256 e8dce277d6edb918499526fadba9902e317496c2af077219f263a7a643467824
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    dbgcore.DLL
                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\opera_package_202610050022031\assistant\dbgcore.DLL
                                                    • Size 196KB
                                                    • SHA256 c16220edd3787da33dbd3ac2fcbec7de6a13e2baf14ae6105bba68d4efd83628
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    dbghelp.dll
                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\opera_package_202610050022031\assistant\dbghelp.dll
                                                    • Size 1.8MB
                                                    • SHA256 990b13e88b4a9985eb5c596078e2ec26a0edcc22169dd71f8a84c7943005306c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\opera_package_202610050022031\de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                    • Size 4.6MB
                                                    • SHA256 e81986014a4fb55c0aa220745d2433c51ad29166b32693de8911784dd3920584
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    installer_prefs_include.json
                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\opera_package_202610050022031\installer_prefs_include.json
                                                    • Size 268B
                                                    • SHA256 ab36714f7b79ecf00f0f6f7f9e83606e405d140b5e5d11c57d544acc6da5562c
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    installer_prefs_include.json56f1db98-38e2-48ec-b00c-4ddbf5ebc696.tmp
                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\opera_package_202610050022031\installer_prefs_include.json56f1db98-38e2-48ec-b00c-4ddbf5ebc696.tmp
                                                    • Size 1KB
                                                    • SHA256 e0d63267db48039e1a8dac621240bb06193d4bf9ea015add9d6b68f7b6b5fd66
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    installer_prefs_include.jsondf01863c-bc6e-4d18-b741-77b87b8cb89c.tmp
                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\555559dc-30e6-45a5-95ba-b516c95d1b50 Opera Installer Temp\opera_package_202610050022031\installer_prefs_include.jsondf01863c-bc6e-4d18-b741-77b87b8cb89c.tmp
                                                    • Size 283B
                                                    • SHA256 9b220ef1ef39cac96f171034c35f8b4f9e0e201f204b272c7271bff3315a49ad
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    13385d49-033d-4724-adce-3c975cf2e0c3.tmp
                                                    • Path C:\Users\Admin\AppData\Local\Temp\13385d49-033d-4724-adce-3c975cf2e0c3.tmp
                                                    • Size 2.6MB
                                                    • SHA256 19bc35ca347a6560c0183e56da6bee3353737e78aa9eff9111c5ebd897b0cfd5
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    50f123af-1292-4710-9651-c62abb842316.tmp
                                                    • Path C:\Users\Admin\AppData\Local\Temp\50f123af-1292-4710-9651-c62abb842316.tmp
                                                    • Size 46KB
                                                    • SHA256 176a736c95c08746480a0e25f7acf323d502d0f6aac4b4dfbeb2713513af8a52
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    installer.exe
                                                    • Path C:\Users\Admin\AppData\Local\Temp\7zS82C3A298\installer.exe
                                                    • Size 8.3MB
                                                    • SHA256 20b18b3c0b48d9ee2776e3972e1d4215c5b715be7d4d895caa4d3e445d12beb5
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    85cc79d6-cd41-49a4-a36e-2bfa6a3f3b41.tmp
                                                    • Path C:\Users\Admin\AppData\Local\Temp\85cc79d6-cd41-49a4-a36e-2bfa6a3f3b41.tmp
                                                    • Size 13KB
                                                    • SHA256 ce8adf970c3290b7ea94c85727c5abe7eb232e16026a1f8f876ad7f3ec03573d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    OpInst.exe
                                                    • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                                    • Size 3.1MB
                                                    • SHA256 b923d153e3d40c890266f79ab1ac29336a4c1b6952edd07b35f66d3bf66c6f88
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    bg.png
                                                    • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                                    • Size 224KB
                                                    • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    logo_128.png
                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2020_352193490\CRX_INSTALL\public\icons\logo_128.png
                                                    • Size 7KB
                                                    • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    logo_16.png
                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2020_352193490\CRX_INSTALL\public\icons\logo_16.png
                                                    • Size 653B
                                                    • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    logo_32.png
                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2020_352193490\CRX_INSTALL\public\icons\logo_32.png
                                                    • Size 1KB
                                                    • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    logo_48.png
                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2020_352193490\CRX_INSTALL\public\icons\logo_48.png
                                                    • Size 2KB
                                                    • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    logo_64.png
                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2020_352193490\CRX_INSTALL\public\icons\logo_64.png
                                                    • Size 2KB
                                                    • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    messages.json
                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2020_426972493\CRX_INSTALL\_locales\en\messages.json
                                                    • Size 396B
                                                    • SHA256 1bcb4888a65788a50ed88f4bd95955d1dafdc950b5ef4609b37f42934a4bf3b9
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    Icon_Light_Neutral.png
                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2020_426972493\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                    • Size 2KB
                                                    • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    Icon_Light_Neutral.png
                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2020_426972493\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
                                                    • Size 962B
                                                    • SHA256 e8adb8a9dcca121a1853749ebef122b84a995ebf8775cd27b0dd54bab9840bd1
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    favicon_opera_one.png
                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3960_142391666\CRX_INSTALL\favicon_opera_one.png
                                                    • Size 2KB
                                                    • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    settings.dat
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                    • Size 40B
                                                    • SHA256 1cb13940904bee4776f95e85c6907a994427f75cb7b1aa3dd9be9022a51bc23c
                                                    • MD5 SHA1 SHA512
                                                    Submit Download

                                                    BookmarkMergedSurfaceOrderingf319abdb-41a1-4480-b402-a8de10730f4b.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarkMergedSurfaceOrderingf319abdb-41a1-4480-b402-a8de10730f4b.tmp
                                                    • Size 6B
                                                    • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                    • MD5 SHA1 SHA512
                                                    Submit Download

                                                    Bookmarks.bak
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks.bak
                                                    • Size 3KB
                                                    • SHA256 81b9614bd55cfc5e95bd67d7c16d0c1cc626ec96f109e77338e40883b5b2d9a7
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    Bookmarks797864ce-d66c-48cf-bba2-63cf3f5b314c.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks797864ce-d66c-48cf-bba2-63cf3f5b314c.tmp
                                                    • Size 36KB
                                                    • SHA256 cf7167f509b325d3724ae6910ea88c09e5a42f9ff07f1b48f7d5b7423cd80436
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    BookmarksExtras22ff72cd-a479-4296-a6d2-e12ac5ff2b25.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras22ff72cd-a479-4296-a6d2-e12ac5ff2b25.tmp
                                                    • Size 239KB
                                                    • SHA256 458873d140b63e896aba14deb88d84d3f050b0562a3ebdf0a3de763ad5b76d98
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    temp-index
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
                                                    • Size 744B
                                                    • SHA256 2967fe2d11f3021706b8ecc7d5a4749109de5c75e22502efadc0f59ac9679ef6
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    temp-index
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
                                                    • Size 336B
                                                    • SHA256 4f00ef20ffd276ef3273324d8eafd9ddd71b766b8599bebf0601b5d70529325d
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    the-real-index
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                    • Size 48B
                                                    • SHA256 591cec40e95b616ae2b7d60a30ae5414f959f88195acfcf59beddd68a691a5fd
                                                    • MD5 SHA1 SHA512
                                                    Submit Download

                                                    index
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\index
                                                    • Size 256KB
                                                    • SHA256 6700eade6cebd48af4ea2065e2cf55e8dfc9571d0a0d20e16cfb69e4125f727d
                                                    • MD5 SHA1 SHA512 SSDEEP
                                                    Submit Download

                                                    MANIFEST-000001
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
                                                    • Size 41B
                                                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                    • MD5 SHA1 SHA512
                                                    Submit Download

                                                    main.js
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.8_0\main.js
                                                    • Size 47KB
                                                    • SHA256 9cc5e1dd96d76735499257c52d632a0a9e17ed4da929035067dadcc586000335
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    scraping-method-Dq4mm50p.js
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\scraping-method-Dq4mm50p.js
                                                    • Size 6KB
                                                    • SHA256 99c8d4f76ebc9fc6cea115065570a12d41903c93e18c1c6385b5b2e70256eb70
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    service-worker.ts-fle0M1Xd.js
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\service-worker.ts-fle0M1Xd.js
                                                    • Size 13KB
                                                    • SHA256 4ebb6cb9c3f033302d6a8c31329009082bafeab73c39cca179511b5a972ba8f8
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    service-worker-loader.js
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\service-worker-loader.js
                                                    • Size 49B
                                                    • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                    • MD5 SHA1 SHA512
                                                    Submit Download

                                                    favicon_opera_one.png
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\favicon_opera_one.png
                                                    • Size 2KB
                                                    • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    reader_mode.js
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\reader_mode.js
                                                    • Size 112KB
                                                    • SHA256 17f8a5c1d70acee668cc6964317d88802d4409c32b0d7e292b95e1de8ddb16df
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    spotify_frame_interceptor.js
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\spotify_frame_interceptor.js
                                                    • Size 5KB
                                                    • SHA256 895ef6ae0efde6f5e8af23d1acbfac4a5351bda31c89d2e64c05f2de0181dd56
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    messages.json
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\_locales\en\messages.json
                                                    • Size 429B
                                                    • SHA256 c6a7161359e3c4fbc4059b7209c585f9aa2306c08e6c39a3003f4b29f2ceb22d
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    background.js
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\background.js
                                                    • Size 87KB
                                                    • SHA256 b199d4f989c63947c53a9d07450038cfe274b7a10e8cc7d688c4049ae14ef63e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    content.js.LICENSE.txt
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\content.js.LICENSE.txt
                                                    • Size 1KB
                                                    • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    Icon_Light_Active.png
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Active.png
                                                    • Size 2KB
                                                    • SHA256 97d9553a4f725354a6d5c3eff11f31285fd89c3b150593f04785b83d0a56efc2
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    Icon_Light_Available_Red.png
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Available_Red.png
                                                    • Size 2KB
                                                    • SHA256 9eccebdbdb61efc0cbd8bccf3a5fedc6f9a1ebe5084b160783f90a56cd1efa7b
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    Icon_Light_Available_Yellow.png
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Available_Yellow.png
                                                    • Size 2KB
                                                    • SHA256 c165ef60bf3806cd0a7121a8d6cfd06909fc84b38a07d43e809bd7bff564099c
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    Icon_Light_Neutral.png
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Neutral.png
                                                    • Size 2KB
                                                    • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    Icon_Light_Active.png
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Active.png
                                                    • Size 883B
                                                    • SHA256 50aa1dcfa9083b57dd6187752b2c149294210be12d263b793d27daf8d431954c
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    Icon_Light_Available_Red.png
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Available_Red.png
                                                    • Size 895B
                                                    • SHA256 2278e95b28851ade57217ab5c7b32598c44e1085693a3e26379643d29fa0a6d1
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    Icon_Light_Available_Yellow.png
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Available_Yellow.png
                                                    • Size 895B
                                                    • SHA256 726a50a9c008449ab7bafbf21325bfc72093b7ae6a56c5be90cf8c32a8a44641
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    Icon_Light_Neutral.png
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Neutral.png
                                                    • Size 932B
                                                    • SHA256 b8e92f9e9b9dc82799231b8d1b57091a9d0bcdd9b54615f86e8c4e4e5c9f036b
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    index.html
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\index.html
                                                    • Size 222B
                                                    • SHA256 fd21c7ca4637b0221250a14b9fcfb6ebc3b734e659ad80151be4bc579db818f1
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    rules.json
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\rules.json
                                                    • Size 839B
                                                    • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    data_0
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\GPUCache\data_0
                                                    • Size 8KB
                                                    • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                    • MD5 SHA1 SHA512 SSDEEP
                                                    Submit Download

                                                    data_1
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\GPUCache\data_1
                                                    • Size 264KB
                                                    • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                    • MD5 SHA1 SHA512 SSDEEP
                                                    Submit Download

                                                    data_2
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\GPUCache\data_2
                                                    • Size 8KB
                                                    • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                    • MD5 SHA1 SHA512 SSDEEP
                                                    Submit Download

                                                    data_3
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\GPUCache\data_3
                                                    • Size 8KB
                                                    • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                    • MD5 SHA1 SHA512 SSDEEP
                                                    Submit Download

                                                    343840cc-4ed0-4dca-888c-72d70530bba2.tmpb00e54c7-694a-45a1-ae04-bad257fd0bf0.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\343840cc-4ed0-4dca-888c-72d70530bba2.tmpb00e54c7-694a-45a1-ae04-bad257fd0bf0.tmp
                                                    • Size 27KB
                                                    • SHA256 3a9c655a88437e331f50a23bb40cb1a3de86277cb1a9488c81c426598cfab0a3
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    539ca54b-ef98-446d-adff-fc231de3456f.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\539ca54b-ef98-446d-adff-fc231de3456f.tmp
                                                    • Size 27KB
                                                    • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    5a55be4b-36dd-4c88-a435-08295f8c0976.tmp701cf014-40d9-4746-87a6-cf452aa9c365.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\5a55be4b-36dd-4c88-a435-08295f8c0976.tmp701cf014-40d9-4746-87a6-cf452aa9c365.tmp
                                                    • Size 27KB
                                                    • SHA256 96092642177bb660dd55afcb6f5ac91a4facb6b88067958b5580b3a1d5cb53b2
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    65c62f34-2daf-469b-b58e-3d74d04230ca.tmp8ad9bbbf-6732-4c3d-bb41-cdb70c843767.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\65c62f34-2daf-469b-b58e-3d74d04230ca.tmp8ad9bbbf-6732-4c3d-bb41-cdb70c843767.tmp
                                                    • Size 27KB
                                                    • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    7528294b-eca3-4997-bf3c-8edb8f8fec5e.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\7528294b-eca3-4997-bf3c-8edb8f8fec5e.tmp
                                                    • Size 27KB
                                                    • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    a51fbe24-979b-4c35-a556-d44231ecf80b.tmp8a41d023-f2e9-4935-911c-dcc89cfe983b.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\a51fbe24-979b-4c35-a556-d44231ecf80b.tmp8a41d023-f2e9-4935-911c-dcc89cfe983b.tmp
                                                    • Size 27KB
                                                    • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    Network Persistent State.backup
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State.backup
                                                    • Size 111B
                                                    • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    Network Persistent State61a38485-0b60-4bfd-ae02-bba84ff9d898.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State61a38485-0b60-4bfd-ae02-bba84ff9d898.tmp
                                                    • Size 1KB
                                                    • SHA256 5f6c8483cd30d3fe6144879cf8a302d0e96d9f58b0620110ada42274492f34ea
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    SCT Auditing Pending Reports
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\SCT Auditing Pending Reports
                                                    • Size 2B
                                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                    • MD5 SHA1 SHA512
                                                    Submit Download

                                                    Preferences3a2a6ad9-147f-481d-a32d-40ec88c6b38d.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences3a2a6ad9-147f-481d-a32d-40ec88c6b38d.tmp
                                                    • Size 15KB
                                                    • SHA256 3616579c6e30533d4040b855739328df6f472935b4abc881f27e9b68eb5a83a1
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    Preferences3e528d3e-fc14-4b95-affa-03ca675218a5.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences3e528d3e-fc14-4b95-affa-03ca675218a5.tmp
                                                    • Size 15KB
                                                    • SHA256 aa159241b0a4e3788a5053765d9d1f8a54aa03ba5caf2cb633ceb87198d12c0c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    Preferencesa95d51f9-be60-4f35-a4a7-1db730986844.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferencesa95d51f9-be60-4f35-a4a7-1db730986844.tmp
                                                    • Size 16KB
                                                    • SHA256 4f184b82f019ee4e84e530b0fa7bfbfc0d291d6ae35afa358f3b47c4c5008ee5
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    Preferencesee419520-f2b2-42ad-8d55-f0c4ae98b37c.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferencesee419520-f2b2-42ad-8d55-f0c4ae98b37c.tmp
                                                    • Size 10KB
                                                    • SHA256 3248ba73b1e318f2d0fcea0c11a06ee7c9e43690fe2fb87cb8367d6dc51210eb
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    Secure Preferences.backup
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences.backup
                                                    • Size 81KB
                                                    • SHA256 2d36e6213baa20ab443a648f6be362cc49982019c367dfca8b62c769ef80bf7b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    Secure Preferences77a3fdc6-740c-4753-9b1f-3bfac119873f.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences77a3fdc6-740c-4753-9b1f-3bfac119873f.tmp
                                                    • Size 108KB
                                                    • SHA256 8c227cf39936f6ad9e325d379b329bc42c681d5dc8cb3adcbdae6025af6fc03b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    Secure Preferencesb7c542a6-25c3-4590-9eb6-a156c72f9a7f.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferencesb7c542a6-25c3-4590-9eb6-a156c72f9a7f.tmp
                                                    • Size 82KB
                                                    • SHA256 cfc536ff1b121c87d2429365cdce9c290b450e9a95b47ab0d034c072d0471262
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    f3ab1e1292e135fa_0
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\f3ab1e1292e135fa_0
                                                    • Size 47KB
                                                    • SHA256 9b9953eed2e9ef54d872bf9401a70bcccc7f4dd898ae864812fe436968c4dc73
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    index
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index
                                                    • Size 24B
                                                    • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                    • MD5 SHA1 SHA512
                                                    Submit Download

                                                    temp-index
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                    • Size 96B
                                                    • SHA256 17bbca2446b28e1112fcc17882987ef075e4531470d277c4889b6610cd85edcd
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    temp-index
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                    • Size 360B
                                                    • SHA256 f3d11d0d51307c2833e070a072cde24179b6c98b334e10ed3ed41f9b0fa4ae7f
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    the-real-index
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                    • Size 72B
                                                    • SHA256 fdbeaf8946a5be18199e9ee58bb6272d32c45252977e794fb8d2db3e3f85a33b
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw
                                                    • Size 1KB
                                                    • SHA256 969aff9eb77de1ebc5f6c6eb9714d85e0c5ddff84779f508bb244857eb46a1a7
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw
                                                    • Size 8KB
                                                    • SHA256 12cf16eec247456d9ed71d763cfff66994d19518305c91041257358eb7dc4ee6
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw
                                                    • Size 381B
                                                    • SHA256 e7623a35dca8da5e2effd0f549578064833366b33208e46aba514f30cc7833da
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw07a325da-c64a-4d60-9484-7d4ab6af1dd4.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw07a325da-c64a-4d60-9484-7d4ab6af1dd4.tmp
                                                    • Size 9KB
                                                    • SHA256 0dca571d6b9def5fd7f6ffcae635000ba1e2cadd0bea465926877ebb0e0669f1
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw0bdb2505-e23e-43ed-8b39-db8ce0ccf124.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw0bdb2505-e23e-43ed-8b39-db8ce0ccf124.tmp
                                                    • Size 10KB
                                                    • SHA256 ca9411be996d644fba231e28134c2a2a4d393ea36b5e2a246c2e17462606d4c5
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw0d4a0250-4c78-469b-a327-84ba03d08eb2.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw0d4a0250-4c78-469b-a327-84ba03d08eb2.tmp
                                                    • Size 1KB
                                                    • SHA256 b4ee4e831facc65b01d113187a91b4cb5c6a27936d3173ccd953fc62e2d229d3
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw0f5d7de7-3338-41d9-842d-0165da3e2e95.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw0f5d7de7-3338-41d9-842d-0165da3e2e95.tmp
                                                    • Size 11KB
                                                    • SHA256 277422e921728a4dbcc547dafa45f1a6e87bc4939f9e7146ed214c51e45fe5e1
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw126ad863-86f5-45b9-b822-f64602720a96.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw126ad863-86f5-45b9-b822-f64602720a96.tmp
                                                    • Size 8KB
                                                    • SHA256 aeb7a8d77603410cb396586988d755ae80c62700b778e37456827d0f57d2b207
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw19874ce2-8135-4b13-b953-dfba8fcb80bb.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw19874ce2-8135-4b13-b953-dfba8fcb80bb.tmp
                                                    • Size 9KB
                                                    • SHA256 274fba87a679a58195e87eb13e5b458fa59a3a7c201eed122e9cbe81dcd5bcf1
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw24c8e292-36af-490f-9155-8204251b678e.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw24c8e292-36af-490f-9155-8204251b678e.tmp
                                                    • Size 9KB
                                                    • SHA256 3386c25c6da6f61cdb0ed8e680ffd8d1b37a339339e0005bdb982118b6d1e0fc
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw271aa033-de77-404f-911c-64e76be5b2c8.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw271aa033-de77-404f-911c-64e76be5b2c8.tmp
                                                    • Size 9KB
                                                    • SHA256 2e3501a1a8e54879f8af38e1a2dc4a15e996212d43985e6d62b4f02a80c6d039
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw2820cbff-f734-456d-a91e-2fc6bfca91fd.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw2820cbff-f734-456d-a91e-2fc6bfca91fd.tmp
                                                    • Size 8KB
                                                    • SHA256 666e9a3df44cc13da4ecaa49bc17da77b225ddc28ca3b5b0a5fad928e49d8412
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw28abae4b-f590-422f-b7cb-7e68ac335f03.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw28abae4b-f590-422f-b7cb-7e68ac335f03.tmp
                                                    • Size 8KB
                                                    • SHA256 f58aeb200d935c346eb47ec70813bde5943c0bf242dd1e20be14b3468cd92b26
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw28f32ed1-aba9-4fe3-b724-70978f9a1299.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw28f32ed1-aba9-4fe3-b724-70978f9a1299.tmp
                                                    • Size 9KB
                                                    • SHA256 836a33bee92dbde0b3935f3cc6f6eafd65822dea1fa60584c94f2a32ddc9f331
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw2d763e6c-286a-46db-931c-94b31805c734.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw2d763e6c-286a-46db-931c-94b31805c734.tmp
                                                    • Size 9KB
                                                    • SHA256 6038bc9651abbc5ec921e0d718c7fc311d978a561d7b7a98c357b4ea4c6e9f62
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw2f8ae153-1949-44b2-8e3d-d27c9369d9ab.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw2f8ae153-1949-44b2-8e3d-d27c9369d9ab.tmp
                                                    • Size 8KB
                                                    • SHA256 e0c28fddb4098f336e9a0ee34e7297d265b3eb2647b37027806ae7d155a2bf68
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw3b425e91-ed53-4c10-b10e-a2fa7a0d6ecf.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw3b425e91-ed53-4c10-b10e-a2fa7a0d6ecf.tmp
                                                    • Size 10KB
                                                    • SHA256 3d63f56b6a76c2055f53c419c41d3cdd459987cba3c85366a7a79cf187ac83f3
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw45364770-6fcf-498e-813d-47b09909ad15.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw45364770-6fcf-498e-813d-47b09909ad15.tmp
                                                    • Size 7KB
                                                    • SHA256 a84a4486399e700e57fdce9188fa77467864826011609e490d21bd403b6b2f4d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw4ea5cf1f-98e4-4926-8bc1-5e4182a5d810.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw4ea5cf1f-98e4-4926-8bc1-5e4182a5d810.tmp
                                                    • Size 1KB
                                                    • SHA256 8ada9c5d562a541736f4e0bad0d36a2539522ac203b15db40f06be96068103a0
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw5391478b-bab6-4e12-a23b-6ef95e2ad57e.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw5391478b-bab6-4e12-a23b-6ef95e2ad57e.tmp
                                                    • Size 9KB
                                                    • SHA256 848191bad91b71d056f602dc684e792ee0f7863e0c6f372d8e1edc784abf1e89
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw5ce7b1ab-33b9-49a9-bc86-b95fa607dae5.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw5ce7b1ab-33b9-49a9-bc86-b95fa607dae5.tmp
                                                    • Size 9KB
                                                    • SHA256 10b0b91c62b8a7b65e28d9c5c11980722d5dd1da45dc9f633d3ccf2ec8ad2c49
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw5d0df828-d9ae-4067-b9b1-2fcc865d52d8.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw5d0df828-d9ae-4067-b9b1-2fcc865d52d8.tmp
                                                    • Size 1KB
                                                    • SHA256 5ef75624ef4a7757c8965cba57698c93ce129f85e5aae4ec338c63e43eccb1f9
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw5e3c9db9-99f7-4bc7-ac4e-a764641e606a.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw5e3c9db9-99f7-4bc7-ac4e-a764641e606a.tmp
                                                    • Size 9KB
                                                    • SHA256 85e08295ac7d176e4380530e93dcacfc69684f88550933ea0038a3f61cad7160
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw5ec074f0-6c79-45c5-bdba-6e51b88539e9.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw5ec074f0-6c79-45c5-bdba-6e51b88539e9.tmp
                                                    • Size 7KB
                                                    • SHA256 c70fc778c371f575d7cea3f57b14ee5bcef04d47c0d843ea3483acd300ddf64e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw5f3eff0e-2fab-4683-b93c-609dafcca253.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw5f3eff0e-2fab-4683-b93c-609dafcca253.tmp
                                                    • Size 9KB
                                                    • SHA256 f986b8fabf1b762ca2ac8700e4648c34a7bbb0d1ff833a050803d41b4b033b7c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw62f849a1-1615-47dd-8674-e27a479968ba.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw62f849a1-1615-47dd-8674-e27a479968ba.tmp
                                                    • Size 9KB
                                                    • SHA256 37d9b05a2dd1e41f252aa1f924baf21fbdcdca2a14f48c1df58046e0c02f5575
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw69598342-4dca-41dc-a80f-ba856f0f7a9c.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw69598342-4dca-41dc-a80f-ba856f0f7a9c.tmp
                                                    • Size 6KB
                                                    • SHA256 71b5ee830804342cf62651c61076b01560fc8ce32bb58d1ae0d58ebb8937d15f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw6ad876cd-1c76-4774-b173-4d9f2d092f85.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw6ad876cd-1c76-4774-b173-4d9f2d092f85.tmp
                                                    • Size 6KB
                                                    • SHA256 0639d294babec4cb7e6a35948cdd2a3b4df4682d17f1a3b472da26a146cf0207
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw79ddf5f0-d09c-494d-8a6d-d92b203899e7.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw79ddf5f0-d09c-494d-8a6d-d92b203899e7.tmp
                                                    • Size 9KB
                                                    • SHA256 bc213237735eb85ffb108a049248e456404a73b03556892ea12e47a2c9e8b9ef
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw79ec3320-d408-41f2-b452-4c597fe9bfb1.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw79ec3320-d408-41f2-b452-4c597fe9bfb1.tmp
                                                    • Size 8KB
                                                    • SHA256 6660f383e0f263c9d82ceae92685148871d8e418e17dd1a3daae0692098663ec
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw7d7f7999-c7b5-4954-a617-cf5c42c7b639.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw7d7f7999-c7b5-4954-a617-cf5c42c7b639.tmp
                                                    • Size 925B
                                                    • SHA256 ed4703b50279e0b27398e8781747d59b056d0824656c718735929e4a4693f3f7
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw7f7d8c5e-5013-4669-b4ce-d42da59f39b4.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw7f7d8c5e-5013-4669-b4ce-d42da59f39b4.tmp
                                                    • Size 1KB
                                                    • SHA256 576615c6955d7a241260edaa4545aab5801af75f8000e7530a58b1ac71bfb00d
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw82e82c07-ab5e-4ac1-b09f-b15d3ed5bdf4.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw82e82c07-ab5e-4ac1-b09f-b15d3ed5bdf4.tmp
                                                    • Size 621B
                                                    • SHA256 17d47ffc8ef04f456105d0d541ee5dd34c0d2e4b9f00ea4405ed6fae894dc45a
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw837db30b-4ff8-46f0-a37a-17a42b5e877b.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw837db30b-4ff8-46f0-a37a-17a42b5e877b.tmp
                                                    • Size 8KB
                                                    • SHA256 e26c4adfb360ce16f8507d978c64b50353d0e62c1c6c6ea3859e0607aac5cf72
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw8d0a524e-1f78-41aa-a115-dc5b5820402a.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw8d0a524e-1f78-41aa-a115-dc5b5820402a.tmp
                                                    • Size 9KB
                                                    • SHA256 fa2e1b92239135078d5cdbb7ba126c4287bc43581fa68b6c06375b45d2cd7ce4
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw8dfcb6d0-2c46-4c3e-9963-27df42082746.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw8dfcb6d0-2c46-4c3e-9963-27df42082746.tmp
                                                    • Size 11KB
                                                    • SHA256 16cbd5a81039aab13b03521c07c11bd89d1902238108a71e362e6df0278f5791
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw997a96ec-ee54-426d-a5b1-1d3eb3337bfb.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw997a96ec-ee54-426d-a5b1-1d3eb3337bfb.tmp
                                                    • Size 9KB
                                                    • SHA256 e5854cb28da38a5668ea1687aae05a2add56fff4482efeb34acc6dde22c7f496
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw9bfc4ec1-77df-494b-86e3-f7ba6385e5ce.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw9bfc4ec1-77df-494b-86e3-f7ba6385e5ce.tmp
                                                    • Size 6KB
                                                    • SHA256 165c58f2c7415134f1d367647afffa8a2c02d6ea3c527fb4c6889e3846203349
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw9f58ee40-5f0e-456f-af29-bd92762d48a8.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.raw9f58ee40-5f0e-456f-af29-bd92762d48a8.tmp
                                                    • Size 9KB
                                                    • SHA256 ad4e650e1d6e8814411ee32619c453507323cfc351fab04b709314ec514646e7
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawa4d6e135-3585-4185-bcc7-dafd2bf8faee.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawa4d6e135-3585-4185-bcc7-dafd2bf8faee.tmp
                                                    • Size 493B
                                                    • SHA256 7578f526c395ff96d1d70017072346fb7fd67c7a5933b0f0fa2532801d2afc6c
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawa7557ced-2a71-429e-ad35-d5012041ad2f.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawa7557ced-2a71-429e-ad35-d5012041ad2f.tmp
                                                    • Size 973B
                                                    • SHA256 2db1937fd5bdfe4a6f193f9000486da47302aff94e95cd94f2bd0a2427773012
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawa95d920a-ab65-4e80-a491-4920bff99418.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawa95d920a-ab65-4e80-a491-4920bff99418.tmp
                                                    • Size 10KB
                                                    • SHA256 f594bade769bc50e5435c191c807a480b11e391c5ad3179484959bd758024642
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawaad20f78-0335-4501-bc35-4007bb2078b1.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawaad20f78-0335-4501-bc35-4007bb2078b1.tmp
                                                    • Size 1KB
                                                    • SHA256 c32737daafb175587898e02c0c450175303b89fc18e0075229b7329ad4502028
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawb1a52543-fc61-46ea-87c1-b852041893d9.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawb1a52543-fc61-46ea-87c1-b852041893d9.tmp
                                                    • Size 7KB
                                                    • SHA256 b94710cbad13428b46062db42125c511c7a6ee70e0a5478854a15171ad0cdb7d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawb1ba44b1-251e-4785-a27f-4654d950c255.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawb1ba44b1-251e-4785-a27f-4654d950c255.tmp
                                                    • Size 10KB
                                                    • SHA256 596bf3cb9f204078323a646219daae9d4c1a7ba64c039b1b772ee03cf2e68fa3
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawb8a3395d-8818-437f-bfa9-6fabd9f5b824.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawb8a3395d-8818-437f-bfa9-6fabd9f5b824.tmp
                                                    • Size 1KB
                                                    • SHA256 4852db40f3bb7e4115dba1aa34c150ad56dfcc9ebc5e6255f7df197eca07ea00
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawb935eb70-486b-4815-b482-e47a0bc68055.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawb935eb70-486b-4815-b482-e47a0bc68055.tmp
                                                    • Size 11KB
                                                    • SHA256 24ce1c184cb7b2df5f8244b1fe9ea34809ebc453c9a0cf243d7492dba33ae0bf
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawbfb378cd-b113-4895-953b-8544da69ef8d.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawbfb378cd-b113-4895-953b-8544da69ef8d.tmp
                                                    • Size 9KB
                                                    • SHA256 296cf1c224e8d13746f5f3807169b17a98b504fa445a7c26ca88fd83cf2b814f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawc2ff3821-0eff-4a69-8646-ab2e506adad5.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawc2ff3821-0eff-4a69-8646-ab2e506adad5.tmp
                                                    • Size 10KB
                                                    • SHA256 9ee097f781a56fb0016b8df7bd70e69c0d4242e0ac3b02b665d3a3e00764852c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawc4e09943-d015-4537-8ec2-06c941971c9b.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawc4e09943-d015-4537-8ec2-06c941971c9b.tmp
                                                    • Size 1KB
                                                    • SHA256 6ea2efd39bd2c0399a7731f2369febe2c6c7ac691aef691ebc1fd796f2c8eb19
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawcab4fde8-1e22-417c-9733-bf9837381782.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawcab4fde8-1e22-417c-9733-bf9837381782.tmp
                                                    • Size 10KB
                                                    • SHA256 82839cc3260b59ebd633ca2528ec07c2dc543388c99e820fdb95fe057e986e64
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawcac751ff-e463-479c-a0c3-d6f41bdff788.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawcac751ff-e463-479c-a0c3-d6f41bdff788.tmp
                                                    • Size 1KB
                                                    • SHA256 494dfdbf2abaec22dced3cd12d924ef34703a7ed12f9a016232069ad31bbbe92
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawcc213d17-1d7b-4934-9bdc-133db68aeabc.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawcc213d17-1d7b-4934-9bdc-133db68aeabc.tmp
                                                    • Size 749B
                                                    • SHA256 3b109e10e1494dfb871f0bbb2f656d1b91c08f671dabd7d8154e03684bb88c54
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawcf95bda5-ca63-482c-b09d-a58a563edb0a.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawcf95bda5-ca63-482c-b09d-a58a563edb0a.tmp
                                                    • Size 11KB
                                                    • SHA256 e3d2a11e830b48dc654795a09046e475a76e0ac9cf0255fc5a8677d577a77c0e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawd30ca129-8b9b-445d-985c-0e22b5ce8229.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawd30ca129-8b9b-445d-985c-0e22b5ce8229.tmp
                                                    • Size 10KB
                                                    • SHA256 2ee43b689409b9760ad0f44a22607d0279ed09070a98c2df8dc1f74b2d9b9064
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawd4a6e8e0-1bf9-43cd-bc52-bbf792f8e195.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawd4a6e8e0-1bf9-43cd-bc52-bbf792f8e195.tmp
                                                    • Size 8KB
                                                    • SHA256 eb48d9049acc8dd58262fc1b36efe20ac4c736d2bf0e7aa67b6c3d9b398d983d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawe29fc852-d5b8-43ae-aecb-7b4b242d5949.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawe29fc852-d5b8-43ae-aecb-7b4b242d5949.tmp
                                                    • Size 9KB
                                                    • SHA256 bdd84efbab93d811d9bee293d63f320b2b28452c14e98f5a516ddb43367c5dbe
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawee94395a-1991-4b2b-a3e8-cd7b4e57a80e.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawee94395a-1991-4b2b-a3e8-cd7b4e57a80e.tmp
                                                    • Size 10KB
                                                    • SHA256 a7084289856719bdf9bab57866a607b087c15da36f8639d04e4b06fd3357d58f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawef284c2a-1589-4dc3-bb47-71d4214286c0.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawef284c2a-1589-4dc3-bb47-71d4214286c0.tmp
                                                    • Size 9KB
                                                    • SHA256 f0740b33d9c14f2b91749d35ba3e90c7600c13c6110d7bd7c807f8e413c3e1c3
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawf5510451-ac38-4f06-9c4b-e175551a8198.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawf5510451-ac38-4f06-9c4b-e175551a8198.tmp
                                                    • Size 9KB
                                                    • SHA256 79848f0d71c001ad380595cb6afe5778272255503e73526161337cc61d89084a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawf718ab7e-b36d-4235-aeb4-f9707031a3ec.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawf718ab7e-b36d-4235-aeb4-f9707031a3ec.tmp
                                                    • Size 10KB
                                                    • SHA256 3435e8553162e4c7d0a9265b17344cb666f2101a81af01910dc9b84bdbfdea1f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawf8b55b91-aaa8-465f-a76e-66a6dc570182.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawf8b55b91-aaa8-465f-a76e-66a6dc570182.tmp
                                                    • Size 9KB
                                                    • SHA256 f5d5609cae781f5e15d9cff6f938666b1c79ecd71eeb4cd076b25bd1d6342a7b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawf9f13b7b-c218-4962-a897-ec67a70a864f.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_61a326ff-33e7-4c27-96f7-6f71a0426426.rawf9f13b7b-c218-4962-a897-ec67a70a864f.tmp
                                                    • Size 11KB
                                                    • SHA256 724aab3ffc221e0cc72b98d9b7dfa7b443565e7bf53270c488949b7fb59ce51e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    session_72cdd212-fcae-4d99-ae26-613c0471a99f.raw
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72cdd212-fcae-4d99-ae26-613c0471a99f.raw
                                                    • Size 381B
                                                    • SHA256 2e35a1720bf15956eafc8424a8d8442ba0c41de6687e83dbb458249a9be9a047
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_72cdd212-fcae-4d99-ae26-613c0471a99f.raw0768cdec-be67-4072-bea3-340a19b7c72d.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72cdd212-fcae-4d99-ae26-613c0471a99f.raw0768cdec-be67-4072-bea3-340a19b7c72d.tmp
                                                    • Size 797B
                                                    • SHA256 38ae48c5349571080661b62d226d622037ab1397ac457efc087459fefd33fbdf
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_72cdd212-fcae-4d99-ae26-613c0471a99f.raw6ea6825c-b282-4446-b5be-4ac4206f9e20.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72cdd212-fcae-4d99-ae26-613c0471a99f.raw6ea6825c-b282-4446-b5be-4ac4206f9e20.tmp
                                                    • Size 781B
                                                    • SHA256 093669949963cc72b501aff04bff0a18c5b3ea9861163caedc2e01fc254a2d93
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_72cdd212-fcae-4d99-ae26-613c0471a99f.raw75ae3705-5654-4fd2-90d1-4cc803a96437.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72cdd212-fcae-4d99-ae26-613c0471a99f.raw75ae3705-5654-4fd2-90d1-4cc803a96437.tmp
                                                    • Size 1KB
                                                    • SHA256 252225820649c030561eb14f81f35cff81cf566f9ae5c67a7bfc1c6d17566796
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_72cdd212-fcae-4d99-ae26-613c0471a99f.raw89a77b36-90d1-46b9-aabc-dbc7289995ec.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72cdd212-fcae-4d99-ae26-613c0471a99f.raw89a77b36-90d1-46b9-aabc-dbc7289995ec.tmp
                                                    • Size 1KB
                                                    • SHA256 442cf17c291dbb704225a42d96573cccc07255af8bf8b6c6c2dbe0d7c5eb3ac7
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_72cdd212-fcae-4d99-ae26-613c0471a99f.rawb7c54a71-a682-4b29-ab01-cd4669aaa993.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72cdd212-fcae-4d99-ae26-613c0471a99f.rawb7c54a71-a682-4b29-ab01-cd4669aaa993.tmp
                                                    • Size 973B
                                                    • SHA256 9c5ca56ec2aec6f52ce90f2e33b746e1631a3b261793e99d86b4fe6715e96582
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_72cdd212-fcae-4d99-ae26-613c0471a99f.rawbe29e611-6a04-4824-a579-eb7fd235f02f.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72cdd212-fcae-4d99-ae26-613c0471a99f.rawbe29e611-6a04-4824-a579-eb7fd235f02f.tmp
                                                    • Size 1KB
                                                    • SHA256 c9ecda7f8a8e4c92c07f5c9c372203423586cd337f59fa2022aefbd38670dc53
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_72cdd212-fcae-4d99-ae26-613c0471a99f.rawc816aa62-5b62-46d5-b23c-96f76df28608.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72cdd212-fcae-4d99-ae26-613c0471a99f.rawc816aa62-5b62-46d5-b23c-96f76df28608.tmp
                                                    • Size 621B
                                                    • SHA256 bea1f7dcd072d3766ba0a034b5e857607afc9c2215a3bbf177f7381cd20fa40f
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_72cdd212-fcae-4d99-ae26-613c0471a99f.rawc8ce3eea-4714-4e3b-a475-17ff07c8a77d.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72cdd212-fcae-4d99-ae26-613c0471a99f.rawc8ce3eea-4714-4e3b-a475-17ff07c8a77d.tmp
                                                    • Size 1KB
                                                    • SHA256 02b5dbf66e16acf25af2b31508d7c49a62997c69cda7ff7f51911ffe0213d6ad
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_72cdd212-fcae-4d99-ae26-613c0471a99f.rawdee03e8c-d1b1-4e60-820f-1d49beeafed1.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72cdd212-fcae-4d99-ae26-613c0471a99f.rawdee03e8c-d1b1-4e60-820f-1d49beeafed1.tmp
                                                    • Size 1KB
                                                    • SHA256 7226bb21e5a33287bf04ddf1df61dabc56e54c202d8d755e942f1ed2009b63b4
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_72cdd212-fcae-4d99-ae26-613c0471a99f.rawe21dc165-e510-4366-96c9-0bc701207e14.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72cdd212-fcae-4d99-ae26-613c0471a99f.rawe21dc165-e510-4366-96c9-0bc701207e14.tmp
                                                    • Size 493B
                                                    • SHA256 20fe2d262137d4a036f65a45f2016a501bd63069f9e22c597694a2db2a413a61
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    session_72cdd212-fcae-4d99-ae26-613c0471a99f.rawf7a5afbc-ed3f-494c-86ae-cf7e26418cc9.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72cdd212-fcae-4d99-ae26-613c0471a99f.rawf7a5afbc-ed3f-494c-86ae-cf7e26418cc9.tmp
                                                    • Size 797B
                                                    • SHA256 b00a7ae4ffb5184e6d2b755ccd4c6bfeef1e924c77a5a38f2ab01015aa9d2c27
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    CURRENT
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\CURRENT
                                                    • Size 16B
                                                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                    • MD5 SHA1 SHA512
                                                    Submit Download

                                                    rhs.dat
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\rhs.dat
                                                    • Size 113KB
                                                    • SHA256 3cd8a5c7b333ea72b91c79163f48c987332bdd82dec6683dea512e8a77003162
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    ssdfp2020.0.997284798
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.0.997284798
                                                    • Size 456B
                                                    • SHA256 98b38427e3c891a83264a52dfde245749aa3d61c12be3c5320243660813bc340
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.0.997284798051796ee-e0c2-4fd8-b0e0-a33d2cbabd9a.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.0.997284798051796ee-e0c2-4fd8-b0e0-a33d2cbabd9a.tmp
                                                    • Size 3KB
                                                    • SHA256 6fc9a1189e690a3cd9742b60d7da5a3f17d75c55f5fd2a5527158d5912c828ea
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.0.99728479805519ab0-c049-4dea-97d0-5e3e8a3fccf4.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.0.99728479805519ab0-c049-4dea-97d0-5e3e8a3fccf4.tmp
                                                    • Size 1KB
                                                    • SHA256 70551043bc2fa84297b8a308ca383b36e776c2c553e5b06c2d6a1e38b9b66547
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.0.9972847980e8bab49-cc81-4345-97c6-0143d521c29e.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.0.9972847980e8bab49-cc81-4345-97c6-0143d521c29e.tmp
                                                    • Size 3KB
                                                    • SHA256 a87c2c61cce6a75913cbcab7c02be4223522fc150221d9afae1d710098978335
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.0.9972847981bdbe249-7fc3-4be4-b95e-1eba68d3768a.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.0.9972847981bdbe249-7fc3-4be4-b95e-1eba68d3768a.tmp
                                                    • Size 549B
                                                    • SHA256 906b9717a54567b47513c0e6efa32bf8737914a0f78a276306eae5808c7643a3
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.0.99728479822b6627f-2d1a-4bd2-8fd3-501bfe013109.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.0.99728479822b6627f-2d1a-4bd2-8fd3-501bfe013109.tmp
                                                    • Size 737B
                                                    • SHA256 85c78ddf15a2a2b2d57d0960ece3413f4b0aff08015ad8a0ee3261cca48d99fb
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.0.9972847982d5fba51-16a7-494f-a227-b4a4dd882bae.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.0.9972847982d5fba51-16a7-494f-a227-b4a4dd882bae.tmp
                                                    • Size 824B
                                                    • SHA256 0378f2020923341bf8c93b4fbc9558c2d5973b3e295e46cf8ab18e67773272ae
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.0.997284798467da3b9-5f7e-4121-a0a6-f1da028c414f.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.0.997284798467da3b9-5f7e-4121-a0a6-f1da028c414f.tmp
                                                    • Size 1KB
                                                    • SHA256 18ec444763fcc707ade507628e547a32b86a16afb0ed67a3576f4f712381d1ba
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.0.99728479850c24530-4fb9-4560-93ad-6f91f70d60ce.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.0.99728479850c24530-4fb9-4560-93ad-6f91f70d60ce.tmp
                                                    • Size 1014B
                                                    • SHA256 84a44616e8884183d85097ff7db8c9020ffef4cd0da3d67b3d721545e36b6922
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.0.9972847985aba2e3b-847c-453a-950b-2edd70e2b330.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.0.9972847985aba2e3b-847c-453a-950b-2edd70e2b330.tmp
                                                    • Size 1KB
                                                    • SHA256 3fa1799faf3a9c71ac079e970e1b96d89c52b4a18191c28610f198d522cd223a
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.0.997284798754bf4df-a138-48dc-94ac-10b3e4582f1d.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.0.997284798754bf4df-a138-48dc-94ac-10b3e4582f1d.tmp
                                                    • Size 3KB
                                                    • SHA256 92b8c315c8c1d3a85ad4484ed43c4300e6327bd8a6819367ccb35f9ea25c8e33
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.0.9972847987cb5d318-79a6-4097-a3d2-936a150aba10.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.0.9972847987cb5d318-79a6-4097-a3d2-936a150aba10.tmp
                                                    • Size 3KB
                                                    • SHA256 5787c2504fb448b89b2fb66be3b88439d7e43bc8f4d74fb10b7c7d4e29f25834
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.0.99728479883f8d639-2fb5-4d46-97fb-f699c42b076b.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.0.99728479883f8d639-2fb5-4d46-97fb-f699c42b076b.tmp
                                                    • Size 3KB
                                                    • SHA256 4d15fbff4da05a47a942f007985becdd0cea54aa7f7b844784cb28f1a558f928
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.0.99728479888fa1ef8-ecd8-41ec-b7bc-d542a9ab49a8.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.0.99728479888fa1ef8-ecd8-41ec-b7bc-d542a9ab49a8.tmp
                                                    • Size 2KB
                                                    • SHA256 53796b2cc4bc05b0bcf3f2429501ae350b041a3feb4f7bea9ea763c4f6ce694c
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.0.997284798913ec576-1b5c-4e09-b1bc-52f0a7fd2fcd.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.0.997284798913ec576-1b5c-4e09-b1bc-52f0a7fd2fcd.tmp
                                                    • Size 3KB
                                                    • SHA256 6377d240c1c565f5199c02c13bae443f2e2bb5a128d50aaac1a47885dbda6ab0
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.0.9972847989171443c-fe5f-4a04-880c-417472485462.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.0.9972847989171443c-fe5f-4a04-880c-417472485462.tmp
                                                    • Size 647B
                                                    • SHA256 6a2cc569e7e99ef6ee91a753f8c49e79b2a30c1da5e0888e9ed2f7ca75f3303f
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.0.9972847989aa925cc-8bdb-44f0-bfa6-a971dfe83cfb.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.0.9972847989aa925cc-8bdb-44f0-bfa6-a971dfe83cfb.tmp
                                                    • Size 1KB
                                                    • SHA256 f565f863c5c0999eb5a5348cb490f4e7d1dceeb814df932eadece139ab8a0b3d
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.0.9972847989e680bdf-c29a-482d-aa25-6f860ac1cdaf.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.0.9972847989e680bdf-c29a-482d-aa25-6f860ac1cdaf.tmp
                                                    • Size 918B
                                                    • SHA256 6c24daa51be9efe3a35028b0d31b94529d4086b65e314333b42451f3c4f802fc
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.0.997284798b1523cef-17d6-4004-a177-14c7c4eb9ccd.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.0.997284798b1523cef-17d6-4004-a177-14c7c4eb9ccd.tmp
                                                    • Size 1KB
                                                    • SHA256 35f2682f6a3af37b27176038be184dc1cae079fafbbe97b16e90eaf58b9a047a
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.0.997284798be3ccd4f-aec7-482b-b1a6-e8c5b8b68a08.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.0.997284798be3ccd4f-aec7-482b-b1a6-e8c5b8b68a08.tmp
                                                    • Size 1KB
                                                    • SHA256 448673c8034ab798aac8fac745c60a3df3afbae42f36247346d7bf17d3cc29fc
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.0.997284798c023b883-63f4-4e06-862d-e2b58abfd31d.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.0.997284798c023b883-63f4-4e06-862d-e2b58abfd31d.tmp
                                                    • Size 3KB
                                                    • SHA256 e3ba92669f6d5d1b75537a2db768af80398fccd4b9454d74faf6075573389a50
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.0.997284798c7884a27-6fd6-40e1-b451-9658a3c69665.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.0.997284798c7884a27-6fd6-40e1-b451-9658a3c69665.tmp
                                                    • Size 1KB
                                                    • SHA256 aef6d64463c5edf4af479e1bc56ce7c259b7495ddc21628aa1bb5dccd1cef23a
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.0.997284798cf140992-1b25-4fb5-8ce9-d25a24a41457.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.0.997284798cf140992-1b25-4fb5-8ce9-d25a24a41457.tmp
                                                    • Size 3KB
                                                    • SHA256 c412e82c55b1e2c23e31a57edcf6f67445372d9271a860d2c254249fed70ce64
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.1.1316307497
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.1.1316307497
                                                    • Size 224B
                                                    • SHA256 a76da415ef844016e29dac0aa0ae7ed25ad72361317fcc3cd1a839d682c24a12
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.1.1316307497
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.1.1316307497
                                                    • Size 171B
                                                    • SHA256 254f1093f4a6fda1ecf1f20c809ac5bf6f07356cb3cdada167d60c2cf0198a6d
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp2020.1.1316307497c5229b0e-8f64-4d13-bbff-bca43b727356.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2020.1.1316307497c5229b0e-8f64-4d13-bbff-bca43b727356.tmp
                                                    • Size 200B
                                                    • SHA256 683f22b675faba9b35555e340414412ddeb9b55b47188543238cef33f23d2720
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp3960.0.1157628052
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3960.0.1157628052
                                                    • Size 1KB
                                                    • SHA256 72d99b92816690907191b2eda866900266fa2c6894306bc9cc52e905ad526a01
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp3960.0.1157628052
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3960.0.1157628052
                                                    • Size 203B
                                                    • SHA256 df2e33c729118c0ace24fe28a49882b4f4095f488d23b818e91ad0c1166f73c3
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp3960.0.1157628052cbd0ec92-5401-4446-90e6-3f02f9e8df9c.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3960.0.1157628052cbd0ec92-5401-4446-90e6-3f02f9e8df9c.tmp
                                                    • Size 265B
                                                    • SHA256 d1ada90e86ad36b05b6f07936d2200e6f239e92ffbb83280bed80e7849d4f0d3
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    ssdfp3960.0.1157628052d30fe44f-2436-4643-ae45-6acbe8f70e49.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3960.0.1157628052d30fe44f-2436-4643-ae45-6acbe8f70e49.tmp
                                                    • Size 2KB
                                                    • SHA256 fee72a13a8cc5bf3171477f6cd464568250ee6a6db679c2d7844cd6fae00ac88
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    suggestions_cache.jsonf1eb6fc3-8b12-479a-b324-55d2ad32396f.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.jsonf1eb6fc3-8b12-479a-b324-55d2ad32396f.tmp
                                                    • Size 652KB
                                                    • SHA256 97afb74e0b391d9b6fe49d38e9fb499a079289699fef7d2394a430d6ebe286db
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    Local State25f75c08-dea4-4d53-99ff-30019bc6da34.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State25f75c08-dea4-4d53-99ff-30019bc6da34.tmp
                                                    • Size 4KB
                                                    • SHA256 28cc6a96a1fee303b54b6cef7cd66b980b42398b34e4f4ae89fec68f4c266e49
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    Local State9f3afcc0-d6af-402c-b17b-a351db3dcee7.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State9f3afcc0-d6af-402c-b17b-a351db3dcee7.tmp
                                                    • Size 3KB
                                                    • SHA256 9ea8d2f481503120d79e32e280ecd8bd2cd30f58a259d76bbaaaec9a8d50a425
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    manifest.json
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\SafetyTips\3091\manifest.json
                                                    • Size 72B
                                                    • SHA256 8541ddcefc17c421e19c9768a70c4772315795eac3268fd8820b0fb4f409720a
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    VariationsSafeSeedV261a9ae3f-0152-48e7-8759-5fd602e7b4c2.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSafeSeedV261a9ae3f-0152-48e7-8759-5fd602e7b4c2.tmp
                                                    • Size 19B
                                                    • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                    • MD5 SHA1 SHA512
                                                    Submit Download

                                                    VariationsSeedV2d328a532-e587-41da-8230-b5054c032801.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2d328a532-e587-41da-8230-b5054c032801.tmp
                                                    • Size 11B
                                                    • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                    • MD5 SHA1 SHA512
                                                    Submit Download

                                                    clipboard_injection_guard_rules.json
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\clipboard_injection_guard_rules.json
                                                    • Size 6KB
                                                    • SHA256 b8d84b82da3d90323de6cf1b4e3594bf7acb99101c72379b10f4b982f82bd487
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
                                                    • Size 184KB
                                                    • SHA256 9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    metadata.json86b15706-4e18-4dc7-8a1f-0dca6dd6fc33.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json86b15706-4e18-4dc7-8a1f-0dca6dd6fc33.tmp
                                                    • Size 124B
                                                    • SHA256 d94de90c0cf39e350e6e61f584f44e4ac815a000c94e9cba769dcccb3d70b25c
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    metadata.json2d7cc834-b55d-4dd1-a641-0a983870363d.tmp
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\extensions_crx_cache\metadata.json2d7cc834-b55d-4dd1-a641-0a983870363d.tmp
                                                    • Size 13B
                                                    • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                    • MD5 SHA1 SHA512
                                                    Submit Download

                                                    hyph-as.hyb
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\hyphen-data\120.0.6050.0\hyph-as.hyb
                                                    • Size 703B
                                                    • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    hyph-hi.hyb
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\hyphen-data\120.0.6050.0\hyph-hi.hyb
                                                    • Size 687B
                                                    • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    hyph-nb.hyb
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\hyphen-data\120.0.6050.0\hyph-nb.hyb
                                                    • Size 141KB
                                                    • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    manifest.json
                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\hyphen-data\120.0.6050.0\manifest.json
                                                    • Size 82B
                                                    • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    verified_contents.json
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_1072874869\_metadata\verified_contents.json
                                                    • Size 1KB
                                                    • SHA256 6cc8b90820b5474238253b5c044555a7b646b1c76acd9068032e672b27dc7c76
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    safety_tips.pb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_1072874869\safety_tips.pb
                                                    • Size 180KB
                                                    • SHA256 3e2a292d081a583e0e612d9d7882898da20a966ee76c0a9162b271f8eb043360
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    verified_contents.json
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\_metadata\verified_contents.json
                                                    • Size 7KB
                                                    • SHA256 65491b21947d60c87c6358dcf69df9aca2b99e8f3b611bd3d559699bbc25000b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-af.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-af.hyb
                                                    • Size 70KB
                                                    • SHA256 5487ee44a4cd706d0086522e90c59c76cdf2ac68ce506fd3eae6054b9220c0cf
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-be.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-be.hyb
                                                    • Size 5KB
                                                    • SHA256 25b7cfa039f82ac92990e1789de40988d490db9b613852fb24036b38ff87893c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-bg.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-bg.hyb
                                                    • Size 3KB
                                                    • SHA256 7593f0395081e3eeb2d8516d10746608afd826cffd4e7e37d53936993d200a13
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    hyph-cs.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-cs.hyb
                                                    • Size 62KB
                                                    • SHA256 97a4755fe9e653a08969f1933e3db19c712078b227bd5aa6799093abc5a0edc3
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-cu.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-cu.hyb
                                                    • Size 51KB
                                                    • SHA256 2baee19d5024ff87dcf3a1b9d0da1b3ac5a1e506adeead3b96a4de5395d0290e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-cy.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-cy.hyb
                                                    • Size 35KB
                                                    • SHA256 4d0569fe2f4b41b3164cf610310e1d996fd2c553cc39de6062e50f4e033cc207
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-da.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-da.hyb
                                                    • Size 6KB
                                                    • SHA256 86fdfc8db62cdaa11f615dad3712da1f4708294e029a4aad0fc285d4ea16c4bd
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-de-1901.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-de-1901.hyb
                                                    • Size 118KB
                                                    • SHA256 8c5fa4b29519d17593e923bc6a9a284df7a6d07fac42f897110b8fb2e0baeef5
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-de-1996.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-de-1996.hyb
                                                    • Size 117KB
                                                    • SHA256 d673805547a0228d2f57a5ad551b8760cfcc521f38c49284ed3976e3515bca49
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-de-ch-1901.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-de-ch-1901.hyb
                                                    • Size 117KB
                                                    • SHA256 8223a912160354e05735522fdb339dc59b353ad5d1e4f4cfa94898dc348e748f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-el.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-el.hyb
                                                    • Size 4KB
                                                    • SHA256 76ae3454fb0045adb83094832578aa4749ce4dc694c4edcf85b419c1e2d9bcd3
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-en-gb.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-en-gb.hyb
                                                    • Size 45KB
                                                    • SHA256 ae4b78009d18e849d87458677151ee3aad1608ad72ec050dfd2421d22e7d031f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-en-us.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-en-us.hyb
                                                    • Size 58KB
                                                    • SHA256 03727cd6f4aa71b203c4c74ca6987ac7d87f13037337ac6f4b6996c2a0dc5f8c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-es.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-es.hyb
                                                    • Size 14KB
                                                    • SHA256 137461792537a2e56a6475e81e2b9ad7a2bdabf1f4738fae186dca3022357349
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-et.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-et.hyb
                                                    • Size 20KB
                                                    • SHA256 10079c66014dd2e6abfef5a018e6553fd5a036afb96bd2a235440a188f88b15e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-eu.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-eu.hyb
                                                    • Size 665B
                                                    • SHA256 e2778a4fc7b8f064a32b6a44bc29f10e264d9d6214b8edb8ebd1f5f6d68e2eb2
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    hyph-fr.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-fr.hyb
                                                    • Size 7KB
                                                    • SHA256 00bd8b2d398d77575da2bfbbc5ec641aad7f2a87d4a31186ec169e85a27de5b7
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-ga.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-ga.hyb
                                                    • Size 34KB
                                                    • SHA256 1e3043f395bfb2a4c43d0480ba2f168ed622881cc3482359ca6e99821e983be8
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-gl.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-gl.hyb
                                                    • Size 9KB
                                                    • SHA256 89d98eff14e2cf1c2314efdf392339e62d7e786f100202a7377bf7b22095a0c5
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-gu.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-gu.hyb
                                                    • Size 655B
                                                    • SHA256 af0edb67c2219b803c3eb6c1dee6f2d41a3fe00468a9da8be8ef5056d701abf3
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    hyph-hr.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-hr.hyb
                                                    • Size 2KB
                                                    • SHA256 d5f066a5657f1d7c39d053956df204b7926f40d2fe4f69573af09d909066e26c
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    hyph-hu.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-hu.hyb
                                                    • Size 309KB
                                                    • SHA256 8b3a16268cc932b226c17ff405b3cfb6eb38a9511a2043d653dc03729efceac1
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-hy.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-hy.hyb
                                                    • Size 605B
                                                    • SHA256 9b34dfca85cb27546829f104f137757efb274934c1e9d4991f55ad564962a76a
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    hyph-it.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-it.hyb
                                                    • Size 2KB
                                                    • SHA256 f9c027d7fd44b01cd5e1cdf802e20c63560673098af18bea0930ba9af334e0f7
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    hyph-ka.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-ka.hyb
                                                    • Size 9KB
                                                    • SHA256 2472271c7955c67e9fdb86d0cd3c5d88f5e598da4f44b6741284b2bbcb2e4d52
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-kn.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-kn.hyb
                                                    • Size 711B
                                                    • SHA256 2b999d0a152f804601aa8f38ff0d3a6e5949977bf1daa76fa888acae21526287
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    hyph-la.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-la.hyb
                                                    • Size 1KB
                                                    • SHA256 fd4b6f36135cd3b932e350ec2017dfd89d2e36ac226f54e4c8f2e4bc6db0593d
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    hyph-lt.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-lt.hyb
                                                    • Size 7KB
                                                    • SHA256 6fe2da26a96834fb9aecbe586d40f728df0ef676a4f235450054e66841b9e2ca
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-lv.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-lv.hyb
                                                    • Size 37KB
                                                    • SHA256 65962ccb5055e4c693e5ac493d6affdc810ec168eb2942f5705b7f4e464f9993
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-ml.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-ml.hyb
                                                    • Size 776B
                                                    • SHA256 90572db8f49b01ec6a102732cdf14fc3f07d363cbe0d261103e583043164e888
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    hyph-mn-cyrl.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-mn-cyrl.hyb
                                                    • Size 5KB
                                                    • SHA256 0d2731f16aa2c90faec8e63260358cbccede403faf95e3af8c66bc2db0729ca0
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-mul-ethi.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-mul-ethi.hyb
                                                    • Size 3KB
                                                    • SHA256 f2fac1bd069ffe5cd1112d94cc31137ed38a1b161093ecd74c9c1688428b688b
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    hyph-nl.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-nl.hyb
                                                    • Size 75KB
                                                    • SHA256 5ebde398944b461cf940f0520c5a49c0882b6f36f9ac5cda0538c8c8b44fb7ca
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-or.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-or.hyb
                                                    • Size 647B
                                                    • SHA256 4e9cd302baffc4ea3e9652327ea24072ebf37b5c4fc0719292bdac10aaad665b
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    hyph-pa.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-pa.hyb
                                                    • Size 607B
                                                    • SHA256 470329d28faa484f945d78ffefb176dcb6f2032c753e25bc014106ad24b2c68a
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    hyph-pt.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-pt.hyb
                                                    • Size 1KB
                                                    • SHA256 f6fbf1bcb260cc86256fc494f388f7b27d10865fbf8f61517dee25af4d58d6e8
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    hyph-ru.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-ru.hyb
                                                    • Size 19KB
                                                    • SHA256 336ce2048ffd31b7bcaf435e53badfaf0579e405042d49adbc0823f6be5f9614
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-sk.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-sk.hyb
                                                    • Size 62KB
                                                    • SHA256 138c5990961da21993653f54a413ddacb8921d6d70b892b7ca154d6e8ad2028c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-sl.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-sl.hyb
                                                    • Size 6KB
                                                    • SHA256 ad746c68562603ac3b15e89da03c76e081c08e7d9c8d4c9f64763e53d696c77c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-sq.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-sq.hyb
                                                    • Size 1KB
                                                    • SHA256 bc29c9401ce952414cbaebc5c8ee1d27c1706c6f77807b5ff713e2124438b3ca
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    hyph-sv.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-sv.hyb
                                                    • Size 70KB
                                                    • SHA256 56642aa5a37625ff9d034761d16b034d4ba5be74090cbd825956bbce2775ecd1
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-ta.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-ta.hyb
                                                    • Size 554B
                                                    • SHA256 40fda94856a86f065de8baa6184ea63dcdb011ee4ca498a7c1fee44c99314c67
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    hyph-te.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-te.hyb
                                                    • Size 703B
                                                    • SHA256 516fa9654fa3aeaab480d40eaf6ad78fc039086bd8edc144be3d59525edcac29
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    hyph-tk.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-tk.hyb
                                                    • Size 2KB
                                                    • SHA256 77fdaed29bd842aaa976ab7ef81b617a15c0a2d1ebd1161c1bf26b79a108b5cd
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    hyph-uk.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-uk.hyb
                                                    • Size 18KB
                                                    • SHA256 1c626abe40d43f6d56a01b5b40305d7c7d6481f616eac00a3f3aaaaca8388786
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    hyph-und-ethi.hyb
                                                    • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2020_88953792\hyph-und-ethi.hyb
                                                    • Size 3KB
                                                    • SHA256 1de83cb787dfaf53fb7e6e8db3aae5008ad24ebdd28be02031306ea9e9f3e285
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    opera-one-dark.jpg
                                                    • Path C:\Windows\SystemTemp\scoped_dir2020_1494511524\opera-one-dark.jpg
                                                    • Size 349KB
                                                    • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    persona.ini
                                                    • Path C:\Windows\SystemTemp\scoped_dir2020_1494511524\persona.ini
                                                    • Size 217B
                                                    • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    opera-one.jpg
                                                    • Path C:\Windows\SystemTemp\scoped_dir2020_1906074348\opera-one.jpg
                                                    • Size 194KB
                                                    • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    persona.ini
                                                    • Path C:\Windows\SystemTemp\scoped_dir2020_1906074348\persona.ini
                                                    • Size 207B
                                                    • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    memory/2340-1377-0x0000026EF0670000-0x0000026EF1F0A000-memory.dmp
                                                    Download

                                                    memory/3824-497-0x00007FFE755F0000-0x00007FFE755F1000-memory.dmp
                                                    Download

                                                    memory/3824-498-0x00007FFE75FA0000-0x00007FFE75FA1000-memory.dmp
                                                    Download