Overview

overview

8

Static

static

8

OperaInstaller.exe

windows10-2004-x64

8

OperaInstaller.exe

windows11-ltsc_2024-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    13/10/2026, 22:29

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaInstaller.exe
  • Size 178KB
  • Sample261013-2d9yvsvscy
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealer

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Writes a Windows system DLL name to a user directory 2 TTPs 2 IoCs

    A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

    defense_evasion
  • Adds Run key to start application 2 TTPs 3 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 8 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 18 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 11 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 5 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 49 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe"
    1⤵
    • Downloads MZ/PE file
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4552
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:1500
      • C:\Users\Admin\AppData\Local\Temp\7zSCD5D00B9\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zSCD5D00B9\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
        3⤵
        • Downloads MZ/PE file
        • Executes dropped EXE
        • Enumerates connected drives
        • Reads the TCP/IP host and domain name from the registry
        • Suspicious use of WriteProcessMemory
        PID:3244
        • C:\Users\Admin\AppData\Local\Temp\7zSCD5D00B9\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zSCD5D00B9\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x2b4,0x2b8,0x2bc,0x290,0x2c0,0x7ff6ecfe09d8,0x7ff6ecfe09e8,0x7ff6ecfe09f8
          4⤵
          • Executes dropped EXE
          PID:4072
        • C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:4660
        • C:\Users\Admin\AppData\Local\Temp\7zSCD5D00B9\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zSCD5D00B9\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=3244 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\opera_package_20261013232939" --session-guid=4a08495a-637a-4b40-86ef-c6111ecf5f18 --server-tracking-blob="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 " --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=1408000000000000
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Suspicious use of WriteProcessMemory
          PID:5580
          • C:\Users\Admin\AppData\Local\Temp\7zSCD5D00B9\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zSCD5D00B9\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x2c8,0x2cc,0x2d0,0x290,0x2d4,0x7ff6ecfe09d8,0x7ff6ecfe09e8,0x7ff6ecfe09f8
            5⤵
            • Executes dropped EXE
            PID:5720
          • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\installer.exe" --backend --initial-pid=3244 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\opera_package_202610132329391" --session-guid=4a08495a-637a-4b40-86ef-c6111ecf5f18 --server-tracking-blob="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 " --silent --desktopshortcut=1 --install-subfolder=137.0.6036.39
            5⤵
            • Executes dropped EXE
            • Enumerates connected drives
            • Modifies registry class
            • Suspicious use of WriteProcessMemory
            PID:3808
            • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x2b4,0x2b8,0x2bc,0x290,0x2c0,0x7ff624be09d8,0x7ff624be09e8,0x7ff624be09f8
              6⤵
              • Executes dropped EXE
              PID:2532
            • C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\opera_package_202610132329391\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\opera_package_202610132329391\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Writes a Windows system DLL name to a user directory
              • Adds Run key to start application
              • System Location Discovery: System Language Discovery
              • Enumerates system info in registry
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:3664
              • C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\opera_package_202610132329391\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\opera_package_202610132329391\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x77c9cc,0x77c9d8,0x77c9e4
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:3792
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Enumerates system info in registry
                • Suspicious use of WriteProcessMemory
                PID:1252
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xacc9cc,0xacc9d8,0xacc9e4
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:4464
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Reads the TCP/IP host and domain name from the registry
                  • System Location Discovery: System Language Discovery
                  • Enumerates system info in registry
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:5012
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:6048
                    • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x278,0x27c,0x280,0x23c,0x284,0x7fff19071e28,0x7fff19071e38,0x7fff19071e48
                      10⤵
                      • Executes dropped EXE
                      PID:4908
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:2264
                    • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x23c,0x240,0x280,0x218,0x284,0x7fff19071e28,0x7fff19071e38,0x7fff19071e48
                      10⤵
                      • Executes dropped EXE
                      PID:5020
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2b0,0x2b4,0x2b8,0x27c,0x2bc,0x1257324,0x1257330,0x125733c
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:1384
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:2656
                      • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7fff19071e28,0x7fff19071e38,0x7fff19071e48
                        11⤵
                        • Executes dropped EXE
                        PID:4260
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:4888
                      • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7fff19071e28,0x7fff19071e38,0x7fff19071e48
                        11⤵
                        • Executes dropped EXE
                        PID:1940
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:5412
                      • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x27c,0x280,0x284,0x278,0x288,0x7fff19071e28,0x7fff19071e38,0x7fff19071e48
                        11⤵
                        • Executes dropped EXE
                        PID:1972
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\opera_package_202610132329391\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:3004
              • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7fff19071e28,0x7fff19071e38,0x7fff19071e48
                7⤵
                • Executes dropped EXE
                PID:5964
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1660,i,17763356536382911431,140251802114178075,262144 --field-trial-handle=2116,i,9556800680320607207,9242749022799947608,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,13536016947020787237,10284643157753380170,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2112 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4356
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1920,i,11315515677283807850,12281111854811608488,524288 --field-trial-handle=2116,i,9556800680320607207,9242749022799947608,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,13536016947020787237,10284643157753380170,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2168 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                • Enumerates system info in registry
                PID:3124
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2584,i,100039023987520503,17148874717913793360,524288 --field-trial-handle=2116,i,9556800680320607207,9242749022799947608,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,13536016947020787237,10284643157753380170,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2600 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:3216
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3776,i,15481347360560941283,11179929046734144915,1572864 --field-trial-handle=2116,i,9556800680320607207,9242749022799947608,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,13536016947020787237,10284643157753380170,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3808 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:2624
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4556,i,14538733583524993883,6341689869129102045,524288 --field-trial-handle=2116,i,9556800680320607207,9242749022799947608,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,13536016947020787237,10284643157753380170,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4584 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:1836
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4752,i,5355358579815805088,17073530013988819764,1572864 --field-trial-handle=2116,i,9556800680320607207,9242749022799947608,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,13536016947020787237,10284643157753380170,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4796 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5388
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4756,i,5212658302487265833,13557923608887569863,524288 --field-trial-handle=2116,i,9556800680320607207,9242749022799947608,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,13536016947020787237,10284643157753380170,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4760 /prefetch:12
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:3080
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5088,i,16859164156767218509,13345130707054817182,524288 --field-trial-handle=2116,i,9556800680320607207,9242749022799947608,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,13536016947020787237,10284643157753380170,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4088 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:3856
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4600,i,16666028524014492050,9508557888275636534,524288 --field-trial-handle=2116,i,9556800680320607207,9242749022799947608,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2120,i,13536016947020787237,10284643157753380170,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5100 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:1780
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:7124
              • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7fff19071e28,0x7fff19071e38,0x7fff19071e48
                7⤵
                • Executes dropped EXE
                PID:7144
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1696,i,5533866957633047719,7046063585530507933,262144 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2180 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:3192
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1920,i,13972549390142330737,12889829850091313297,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2228 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                • Enumerates system info in registry
                PID:4732
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2564,i,66405744006126146,14258059823976333946,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2580 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5044
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3304,i,6941590362804378595,3806993099676504523,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3288 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:6744
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3320,i,1347820302552199414,3274895209122823115,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3404 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6168
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3332,i,10664094751827323039,11655607555636308815,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3424 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6176
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3344,i,3928294268226955373,2798741128263734043,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3444 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6192
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3356,i,3612581361592048451,13654366894200843840,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3464 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6188
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3368,i,14073634842217167758,15324599995590969947,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3484 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6220
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3380,i,11365571742162406216,12292251736431618974,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3504 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6236
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3920,i,2365339183638454256,8468811475473060911,1572864 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4108 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6256
              • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_gx_splash.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                7⤵
                • Executes dropped EXE
                • Modifies registry class
                • Suspicious use of AdjustPrivilegeToken
                PID:6748
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4844,i,8575829590754700289,3467201139053186834,1572864 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4856 /prefetch:9
                7⤵
                • Executes dropped EXE
                PID:6972
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5004,i,17766348765114241490,9587117068487576216,1572864 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5008 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7004
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5208,i,7335882667280871582,10276726720530738707,1572864 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5224 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6936
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5356,i,5424738395888550417,10116809356384182481,1572864 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5376 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7008
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6268,i,6358349500403117371,17662754459506830385,1572864 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5892 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:5544
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6872,i,10288124187207336693,3891605281599784818,1572864 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=3476 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:4324
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6804,i,6625404927160991992,10396336151918630190,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6572 /prefetch:12
                7⤵
                • Executes dropped EXE
                PID:6308
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7104,i,7634010886759947017,6772438878058000768,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=5732 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6700
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6836,i,16913434997083413540,11177864054741673984,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7080 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6712
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7148,i,6227638566615911950,9533417890773964067,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7388 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6180
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7392,i,13205330333401171706,10488139082531817738,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7416 /prefetch:14
                7⤵
                • Enumerates system info in registry
                PID:6212
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7424,i,198642454155079711,14137862053726698256,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7676 /prefetch:14
                7⤵
                  PID:6692
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7664,i,15361579855701879887,6816307556063051971,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7696 /prefetch:14
                  7⤵
                  • Enumerates system info in registry
                  PID:6200
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7840,i,1337412631899310370,4442628886150710024,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7700 /prefetch:14
                  7⤵
                    PID:6224
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8104,i,16077323972872737914,3050637384056253265,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8116 /prefetch:14
                    7⤵
                    • Enumerates system info in registry
                    PID:1648
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8216,i,17195403017871996222,14727732500135080716,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8264 /prefetch:14
                    7⤵
                    • Enumerates system info in registry
                    PID:7084
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6908,i,11631820937530504089,4713343660892322627,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8232 /prefetch:14
                    7⤵
                      PID:7096
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8244,i,262104927982541487,3570260993558331773,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8300 /prefetch:14
                      7⤵
                        PID:7108
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8320,i,599851909145891948,8007546265384468133,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8372 /prefetch:14
                        7⤵
                        • Enumerates system info in registry
                        PID:3064
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8280,i,15805635009046851428,11538767631526401018,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8352 /prefetch:14
                        7⤵
                        • Enumerates system info in registry
                        PID:5860
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8268,i,3696766836092684698,3345817396584825341,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8332 /prefetch:14
                        7⤵
                          PID:7116
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=9056,i,5850485334990928546,3837421753284912811,1572864 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9116 /prefetch:9
                          7⤵
                          • Enumerates system info in registry
                          PID:6648
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9104,i,874903554822248646,13824419372507579699,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9136 /prefetch:14
                          7⤵
                          • Enumerates system info in registry
                          PID:6652
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9420,i,10483727778668038135,1854825742419337651,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9432 /prefetch:14
                          7⤵
                          • Enumerates system info in registry
                          PID:3088
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9676,i,10181287577826659825,7984273586203780915,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=6780 /prefetch:14
                          7⤵
                          • Enumerates system info in registry
                          PID:6928
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9828,i,1529274422690359984,4968392415252236726,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9844 /prefetch:14
                          7⤵
                          • Enumerates system info in registry
                          PID:3756
                        • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                          7⤵
                          • Reads the TCP/IP host and domain name from the registry
                          PID:1400
                          • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                            C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x298,0x29c,0x2a0,0x270,0x2a4,0x7ff6135c8598,0x7ff6135c85a8,0x7ff6135c85b8
                            8⤵
                              PID:8072
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=10264,i,3287605344186023149,16018839007399676400,1572864 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10332 /prefetch:1
                            7⤵
                            • Enumerates system info in registry
                            PID:6952
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10236,i,14323293741210917027,13059811258122144931,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10260 /prefetch:14
                            7⤵
                            • Enumerates system info in registry
                            PID:4352
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=10644,i,12895359231967676951,7610171356270736366,1572864 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10692 /prefetch:1
                            7⤵
                              PID:6228
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10376,i,7546848283357611353,7158085580511796608,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=7768 /prefetch:14
                              7⤵
                                PID:6536
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7992,i,11465313706952264006,12491228254060175837,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=8060 /prefetch:14
                                7⤵
                                  PID:7092
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8044,i,7616153002969655729,8280293791701609983,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=8252 /prefetch:14
                                  7⤵
                                    PID:7484
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7856,i,7876516862019956481,951453798016770341,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=7776 /prefetch:14
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:7572
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3300,i,11488052704493136387,17982447190502471847,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=3604 /prefetch:14
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:7592
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3596,i,7531481125175464017,10598613099367234097,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=3572 /prefetch:14
                                    7⤵
                                      PID:7764
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3536,i,4572788479803737194,3489404079134646305,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=5616 /prefetch:14
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:7904
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6348,i,15980194849707448821,8859808231942192797,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=10604 /prefetch:14
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:8064
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8632,i,9631752293677084536,9055117354825820609,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=8532 /prefetch:14
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:8060
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3540,i,9927425839375382200,10537857973608883528,524288 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=8160 /prefetch:14
                                      7⤵
                                        PID:4172
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=3448,i,16245222721061888009,6770310100824641313,1572864 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=3840 /prefetch:9
                                        7⤵
                                          PID:5988
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=3388,i,4935518008587824581,6303025125121857072,1572864 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=3564 /prefetch:9
                                          7⤵
                                          • Enumerates system info in registry
                                          PID:4084
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=3572,i,13649128183861833378,14346117890615654510,1572864 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=10536 /prefetch:9
                                          7⤵
                                            PID:5624
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=892,i,3607797311660238736,14167370662360255791,1572864 --field-trial-handle=2184,i,528760143002445645,4345962695928591005,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2188,i,3488756049016199679,3308721249826329326,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=10824 /prefetch:9
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:7812
                                    • C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\opera_package_202610132329391\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe
                                      "C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\opera_package_202610132329391\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe"
                                      4⤵
                                      • Executes dropped EXE
                                      • Writes a Windows system DLL name to a user directory
                                      • System Location Discovery: System Language Discovery
                                      PID:3364
                                    • C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\opera_package_202610132329391\assistant\assistant_installer.exe
                                      "C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\opera_package_202610132329391\assistant\assistant_installer.exe" --version
                                      4⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • System Location Discovery: System Language Discovery
                                      • Enumerates system info in registry
                                      • Suspicious use of WriteProcessMemory
                                      PID:4672
                                      • C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\opera_package_202610132329391\assistant\assistant_installer.exe
                                        "C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\opera_package_202610132329391\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x77c9cc,0x77c9d8,0x77c9e4
                                        5⤵
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        • System Location Discovery: System Language Discovery
                                        PID:4124
                              • C:\Windows\system32\svchost.exe
                                C:\Windows\system32\svchost.exe -k GPSvcGroup
                                1⤵
                                  PID:2884
                                • C:\Windows\system32\wbem\unsecapp.exe
                                  C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                  1⤵
                                    PID:4832
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                    1⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    • Enumerates system info in registry
                                    • Suspicious use of WriteProcessMemory
                                    PID:5108
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe
                                      C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x274,0x278,0x27c,0x240,0x280,0x7fff19071e28,0x7fff19071e38,0x7fff19071e48
                                      2⤵
                                      • Executes dropped EXE
                                      PID:1132
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                    1⤵
                                    • Reads the TCP/IP host and domain name from the registry
                                    PID:4696
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                      C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff6135c8598,0x7ff6135c85a8,0x7ff6135c85b8
                                      2⤵
                                        PID:2668
                                      • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                        "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                        2⤵
                                          PID:7956

                                      Network

                                            MITRE ATT&CK Enterprise v16

                                            Reconnaissance

                                            Resource Development

                                            Initial Access

                                            Execution

                                            Persistence

                                            Boot or Logon Autostart Execution

                                            1
                                            T1547

                                            Registry Run Keys / Startup Folder

                                            1
                                            T1547.001

                                            Event Triggered Execution

                                            1
                                            T1546

                                            Component Object Model Hijacking

                                            1
                                            T1546.015

                                            Hijack Execution Flow

                                            1
                                            T1574

                                            DLL Search Order Hijacking

                                            1
                                            T1574.001

                                            Privilege Escalation

                                            Boot or Logon Autostart Execution

                                            1
                                            T1547

                                            Registry Run Keys / Startup Folder

                                            1
                                            T1547.001

                                            Event Triggered Execution

                                            1
                                            T1546

                                            Component Object Model Hijacking

                                            1
                                            T1546.015

                                            Hijack Execution Flow

                                            1
                                            T1574

                                            DLL Search Order Hijacking

                                            1
                                            T1574.001

                                            Defense Evasion

                                            Hijack Execution Flow

                                            1
                                            T1574

                                            DLL Search Order Hijacking

                                            1
                                            T1574.001

                                            Masquerading

                                            1
                                            T1036

                                            Match Legitimate Name or Location

                                            1
                                            T1036.005

                                            Modify Registry

                                            2
                                            T1112

                                            Credential Access

                                            Credentials from Password Stores

                                            1
                                            T1555

                                            Credentials from Web Browsers

                                            1
                                            T1555.003

                                            Unsecured Credentials

                                            1
                                            T1552

                                            Credentials In Files

                                            1
                                            T1552.001

                                            Discovery

                                            Peripheral Device Discovery

                                            1
                                            T1120

                                            Query Registry

                                            5
                                            T1012

                                            System Information Discovery

                                            4
                                            T1082

                                            System Location Discovery

                                            1
                                            T1614

                                            System Language Discovery

                                            1
                                            T1614.001

                                            System Network Configuration Discovery

                                            1
                                            T1016

                                            System Time Discovery

                                            1
                                            T1124

                                            Lateral Movement

                                            Collection

                                            Data from Local System

                                            1
                                            T1005

                                            Command and Control

                                            Exfiltration

                                            Impact

                                            Replay Monitor

                                            Loading Replay Monitor...

                                            Downloads

                                            E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                            • Size 471B
                                            • SHA256 a7c388043208fc063435f0b80680eb5dea6e2e18335c33414bcd89e24000cfca
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                            • Size 416B
                                            • SHA256 c902323cfd23ac7be96064bf991852430967483caf015c552f253f31b16a223a
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            snapshot-new.baf
                                            • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\No_Vary_Search\snapshot-new.baf
                                            • Size 20B
                                            • SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            f_000001
                                            • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
                                            • Size 163KB
                                            • SHA256 e898cd8f466a4998d3e20bbd0c93e218feed5eaf7db22250418f2d402ca75041
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            137.0.6036.39.manifest
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\137.0.6036.39.manifest
                                            • Size 225B
                                            • SHA256 a63ae0542021b560b1bd4569d8ad5b20cba067e9ea88db7f1e729fd1423bf530
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            150x150Logo.scale-100.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\150x150Logo.scale-100.png
                                            • Size 1KB
                                            • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            150x150Logo.scale-100_contrast-white.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\150x150Logo.scale-100_contrast-white.png
                                            • Size 1KB
                                            • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            150x150Logo.scale-140.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\150x150Logo.scale-140.png
                                            • Size 1KB
                                            • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            150x150Logo.scale-140_contrast-white.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\150x150Logo.scale-140_contrast-white.png
                                            • Size 1KB
                                            • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            150x150Logo.scale-180.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\150x150Logo.scale-180.png
                                            • Size 1KB
                                            • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            150x150Logo.scale-180_contrast-white.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\150x150Logo.scale-180_contrast-white.png
                                            • Size 1KB
                                            • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            150x150Logo.scale-80.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\150x150Logo.scale-80.png
                                            • Size 827B
                                            • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            150x150Logo.scale-80_contrast-white.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\150x150Logo.scale-80_contrast-white.png
                                            • Size 799B
                                            • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            70x70Logo.scale-100.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\70x70Logo.scale-100.png
                                            • Size 781B
                                            • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            70x70Logo.scale-100_contrast-white.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\70x70Logo.scale-100_contrast-white.png
                                            • Size 752B
                                            • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            70x70Logo.scale-140.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\70x70Logo.scale-140.png
                                            • Size 991B
                                            • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            70x70Logo.scale-140_contrast-white.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\70x70Logo.scale-140_contrast-white.png
                                            • Size 865B
                                            • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            70x70Logo.scale-180.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\70x70Logo.scale-180.png
                                            • Size 1KB
                                            • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            70x70Logo.scale-180_contrast-white.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\70x70Logo.scale-180_contrast-white.png
                                            • Size 1KB
                                            • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            70x70Logo.scale-80.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\70x70Logo.scale-80.png
                                            • Size 590B
                                            • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            70x70Logo.scale-80_contrast-white.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\70x70Logo.scale-80_contrast-white.png
                                            • Size 519B
                                            • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            assistant_package
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\assistant_package
                                            • Size 4.0MB
                                            • SHA256 94e3084f1b04722c389ccce1c70129dd62190073ebeccf8c9f9114056c76cef0
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            d3dcompiler_47.dll
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\d3dcompiler_47.dll
                                            • Size 4.5MB
                                            • SHA256 f7ca62f2dc8e1d509c5ccf46944bc878208afd081705d555e94dd24720f7ba8f
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            dxcompiler.dll
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\dxcompiler.dll
                                            • Size 24.6MB
                                            • SHA256 773065b372d128f44d06f28e43cfa8925e9810ae4aa8ceae6fd2dc277fb5004b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            dxil.dll
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\dxil.dll
                                            • Size 1.4MB
                                            • SHA256 9a73346619078ecb692d3d4edf8257d89fb9207be215c1a9130b1f1ac115739a
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            files_list
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\files_list
                                            • Size 6KB
                                            • SHA256 e762b48bcb2cd9bae9f05d9899fa9f09a3290ffe6be0a9a81126b2e73fd1e6ce
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            headless_command_resources.pak
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\headless_command_resources.pak
                                            • Size 2KB
                                            • SHA256 e1f2ec7189570bec91b544cd289af7af3dfe03d4694634068d7ae3ce200792f1
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            icudtl.dat
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\icudtl.dat
                                            • Size 10.4MB
                                            • SHA256 7377adaf7f3aa2170098bd2bc144ee5f8b9677a206b54ce93c0ec392b0a6abea
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            installer.exe
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\installer.exe
                                            • Size 8.4MB
                                            • SHA256 4c6a3941719ed6e11ac4575e57e09b0610effb73c1587dfa41787f47104437e0
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            installer_helper_64.exe
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\installer_helper_64.exe
                                            • Size 606KB
                                            • SHA256 93f55ac758cd83c0e36f0a5871c4fe1870113002fed56e8252ef98efa6c245bb
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            libEGL.dll
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\libEGL.dll
                                            • Size 454KB
                                            • SHA256 ccb1ebab658f5d7463c20b8f4af77f4e8f33e0119296de65470cd051d04b80b6
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            libGLESv2.dll
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\libGLESv2.dll
                                            • Size 454KB
                                            • SHA256 f43971b4da5acda16fd35ca070373f749fa7eb59fd178f86a787575244996152
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            bg.pak
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\localization\bg.pak
                                            • Size 971KB
                                            • SHA256 00ac07cecb13eb09eef53eb291b2b26c0745d0de86a86c731385d0425954f5f4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            bn.pak
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\localization\bn.pak
                                            • Size 1.2MB
                                            • SHA256 75ac9c3a34ccf86c94bdf5a8ca0ae70ebedb9f646e03c7b4f0569d82e57ac15e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            ca.pak
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\localization\ca.pak
                                            • Size 612KB
                                            • SHA256 414771d6719e4ed6fcb91202d81020eafc3fd6a2c53a6dd68bc0bde70c7c740c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            cs.pak
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\localization\cs.pak
                                            • Size 612KB
                                            • SHA256 f439815f547e86b6348290533702843873029a280bd4a1ff71b6912fe3a87eba
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            da.pak
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\localization\da.pak
                                            • Size 562KB
                                            • SHA256 f05479863ca3494edac71f59e6b8a3fcce1e63f4065fbc11c7d77d759279a799
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            de.pak
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\localization\de.pak
                                            • Size 609KB
                                            • SHA256 23219d3dcc9c881c9cc2703eacdb2cc5aeb486a1f04a166e482144ee140513a0
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            el.pak
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\localization\el.pak
                                            • Size 1.0MB
                                            • SHA256 b99ca089731382483fd23a8229bb8916e5926a79426892d914feffe750d7d1c7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            en-GB.pak
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\localization\en-GB.pak
                                            • Size 493KB
                                            • SHA256 1f0036af476181b98b5ac9b71072c7474f1f4c922fe05427f97953a00b444c4a
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            en-US.pak
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\localization\en-US.pak
                                            • Size 497KB
                                            • SHA256 95fd36c888dbb3eea43ccd53b8cf97193bcafeacc1b237eae78b8d094e241cf2
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            installer_prefs.json540e8105-c109-4d74-a615-1e6805ffde1a.tmp
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json540e8105-c109-4d74-a615-1e6805ffde1a.tmp
                                            • Size 1KB
                                            • SHA256 1ebdeb8d361d884847d624baadf1b8c9120e633808cc8d0542078de705cdbf85
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Opera Browser.lnk
                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\opera_package_202610132329391\Opera Browser.lnk
                                            • Size 1KB
                                            • SHA256 c3e66a0ae2ff28e76da047c55b7e595b8a9bc63a2decc0dc7335662dc0d4a54f
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            additional_file0.tmp
                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\opera_package_202610132329391\additional_file0.tmp
                                            • Size 2.9MB
                                            • SHA256 30786977e61add36f7c641facfb7fce1b2ec7c2a0a7e055a172f127a68788556
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            assistant_installer.exe
                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\opera_package_202610132329391\assistant\assistant_installer.exe
                                            • Size 2.4MB
                                            • SHA256 e8dce277d6edb918499526fadba9902e317496c2af077219f263a7a643467824
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            dbgcore.DLL
                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\opera_package_202610132329391\assistant\dbgcore.DLL
                                            • Size 196KB
                                            • SHA256 c16220edd3787da33dbd3ac2fcbec7de6a13e2baf14ae6105bba68d4efd83628
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            dbghelp.dll
                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\opera_package_202610132329391\assistant\dbghelp.dll
                                            • Size 1.8MB
                                            • SHA256 990b13e88b4a9985eb5c596078e2ec26a0edcc22169dd71f8a84c7943005306c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            de932af914ba00303d4a2778a383ac9c831101e2.crx
                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\opera_package_202610132329391\de932af914ba00303d4a2778a383ac9c831101e2.crx
                                            • Size 4.6MB
                                            • SHA256 7709b01cae20a411b72b40ce900b0058c6dd03167d05da7e42bf3d95ceffd582
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            installer_prefs_include.json
                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\opera_package_202610132329391\installer_prefs_include.json
                                            • Size 228B
                                            • SHA256 fb510f9f3decb14b00aa8a87149dbbdd4286ee684cce0fab0c996d15aa67d4a6
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            installer_prefs_include.json12b36bb0-279a-44a6-9be8-c0eef22327cf.tmp
                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\opera_package_202610132329391\installer_prefs_include.json12b36bb0-279a-44a6-9be8-c0eef22327cf.tmp
                                            • Size 1KB
                                            • SHA256 f23ae85192ff66e4560955758795345dd9b9bd3d7ea45f12af17175951a5ede4
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            installer_prefs_include.json7c9097be-f03b-41ed-a93b-c8d4dd4ff206.tmp
                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\46eeca31-65e2-4d5e-be19-ff576d8e9133 Opera Installer Temp\opera_package_202610132329391\installer_prefs_include.json7c9097be-f03b-41ed-a93b-c8d4dd4ff206.tmp
                                            • Size 243B
                                            • SHA256 bb34cce4e4c695d363965ea84f9ddc9cb30ce8ee95bcef6140f159be43969430
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            installer.exe
                                            • Path C:\Users\Admin\AppData\Local\Temp\7zSCD5D00B9\installer.exe
                                            • Size 8.4MB
                                            • SHA256 c2ac35ff3a7e38118be30262da2ba076470c58c10aa7f9a7e5c3b7ce15c73f1b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            OpInst.exe
                                            • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                            • Size 3.1MB
                                            • SHA256 2ce41a02022b4a988f44743d9be2f66534775f56e35e63e946b0a201d8ab4a6f
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            bg.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                            • Size 224KB
                                            • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            favicon_opera_one.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3004_672071091\CRX_INSTALL\favicon_opera_one.png
                                            • Size 2KB
                                            • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            messages.json
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7124_1050060730\CRX_INSTALL\_locales\en\messages.json
                                            • Size 396B
                                            • SHA256 1bcb4888a65788a50ed88f4bd95955d1dafdc950b5ef4609b37f42934a4bf3b9
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Icon_Light_Neutral.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7124_1050060730\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                            • Size 2KB
                                            • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Icon_Light_Neutral.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7124_1050060730\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
                                            • Size 962B
                                            • SHA256 e8adb8a9dcca121a1853749ebef122b84a995ebf8775cd27b0dd54bab9840bd1
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            logo_128.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7124_1348930653\CRX_INSTALL\public\icons\logo_128.png
                                            • Size 7KB
                                            • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            logo_16.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7124_1348930653\CRX_INSTALL\public\icons\logo_16.png
                                            • Size 653B
                                            • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            logo_32.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7124_1348930653\CRX_INSTALL\public\icons\logo_32.png
                                            • Size 1KB
                                            • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            logo_48.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7124_1348930653\CRX_INSTALL\public\icons\logo_48.png
                                            • Size 2KB
                                            • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            logo_64.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7124_1348930653\CRX_INSTALL\public\icons\logo_64.png
                                            • Size 2KB
                                            • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            settings.dat
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                            • Size 40B
                                            • SHA256 0af49b31058d244953f96f2a38225bc2cb5ff6dce1b9c0fbe9e13184b084f93d
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            BookmarkMergedSurfaceOrdering4ac492f9-7725-4c33-94df-fbd1feb5d038.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarkMergedSurfaceOrdering4ac492f9-7725-4c33-94df-fbd1feb5d038.tmp
                                            • Size 6B
                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            BookmarksExtrasda184d97-3276-49d3-a6b3-0203509c377c.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtrasda184d97-3276-49d3-a6b3-0203509c377c.tmp
                                            • Size 223KB
                                            • SHA256 5dcbd7d70010a064b02a02117d559b324ae8bb856d3954e3edafb2b4a7093eb0
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Bookmarksce62677b-2628-4b4b-a115-67770a7a46ff.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarksce62677b-2628-4b4b-a115-67770a7a46ff.tmp
                                            • Size 35KB
                                            • SHA256 1458408fcfce01e33527a34559cd801f2753d55678567b405d653d17217210a8
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            temp-index
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
                                            • Size 336B
                                            • SHA256 e5b17f46899ea5a01a24df9aed2f263b2af91e2298752a87e2691291f08f1e0f
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            temp-index
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
                                            • Size 744B
                                            • SHA256 5689f75ef9315e0bbdeba95b2ba7cfdfe35344ffca6974fb158b40fcd059fe16
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            the-real-index
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                            • Size 48B
                                            • SHA256 2736b9ff77414273b5aca1c2cf8ef447c87fb90856b3beafb99b6b7629a88327
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            data_0
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_0
                                            • Size 8KB
                                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            data_1
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_1
                                            • Size 264KB
                                            • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            data_2
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_2
                                            • Size 8KB
                                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            data_3
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_3
                                            • Size 8KB
                                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            main.js
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.8_0\main.js
                                            • Size 47KB
                                            • SHA256 9cc5e1dd96d76735499257c52d632a0a9e17ed4da929035067dadcc586000335
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            scraping-method-Dq4mm50p.js
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\scraping-method-Dq4mm50p.js
                                            • Size 6KB
                                            • SHA256 99c8d4f76ebc9fc6cea115065570a12d41903c93e18c1c6385b5b2e70256eb70
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            service-worker.ts-fle0M1Xd.js
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\service-worker.ts-fle0M1Xd.js
                                            • Size 13KB
                                            • SHA256 4ebb6cb9c3f033302d6a8c31329009082bafeab73c39cca179511b5a972ba8f8
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            service-worker-loader.js
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\service-worker-loader.js
                                            • Size 49B
                                            • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            favicon_opera_one.png
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68.0.1_0\favicon_opera_one.png
                                            • Size 2KB
                                            • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            reader_mode.js
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68.0.1_0\reader_mode.js
                                            • Size 112KB
                                            • SHA256 d6671e14f42d8ca03d84a67f459b392123dfa65ad1fcd0c0ec105981ee2cc1c3
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            spotify_frame_interceptor.js
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68.0.1_0\spotify_frame_interceptor.js
                                            • Size 5KB
                                            • SHA256 71e05e0bba7fa44f282661fc99cc7b824d556dbb32957e027c995b555aae20a5
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            messages.json
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\_locales\en\messages.json
                                            • Size 429B
                                            • SHA256 c6a7161359e3c4fbc4059b7209c585f9aa2306c08e6c39a3003f4b29f2ceb22d
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            background.js
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\background.js
                                            • Size 87KB
                                            • SHA256 b199d4f989c63947c53a9d07450038cfe274b7a10e8cc7d688c4049ae14ef63e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            content.js.LICENSE.txt
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\content.js.LICENSE.txt
                                            • Size 1KB
                                            • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Icon_Light_Active.png
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Active.png
                                            • Size 2KB
                                            • SHA256 97d9553a4f725354a6d5c3eff11f31285fd89c3b150593f04785b83d0a56efc2
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Icon_Light_Available_Red.png
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Available_Red.png
                                            • Size 2KB
                                            • SHA256 9eccebdbdb61efc0cbd8bccf3a5fedc6f9a1ebe5084b160783f90a56cd1efa7b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Icon_Light_Available_Yellow.png
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Available_Yellow.png
                                            • Size 2KB
                                            • SHA256 c165ef60bf3806cd0a7121a8d6cfd06909fc84b38a07d43e809bd7bff564099c
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Icon_Light_Neutral.png
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Neutral.png
                                            • Size 2KB
                                            • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Icon_Light_Active.png
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Active.png
                                            • Size 883B
                                            • SHA256 50aa1dcfa9083b57dd6187752b2c149294210be12d263b793d27daf8d431954c
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Icon_Light_Available_Red.png
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Available_Red.png
                                            • Size 895B
                                            • SHA256 2278e95b28851ade57217ab5c7b32598c44e1085693a3e26379643d29fa0a6d1
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Icon_Light_Available_Yellow.png
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Available_Yellow.png
                                            • Size 895B
                                            • SHA256 726a50a9c008449ab7bafbf21325bfc72093b7ae6a56c5be90cf8c32a8a44641
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Icon_Light_Neutral.png
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Neutral.png
                                            • Size 932B
                                            • SHA256 b8e92f9e9b9dc82799231b8d1b57091a9d0bcdd9b54615f86e8c4e4e5c9f036b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            index.html
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\index.html
                                            • Size 222B
                                            • SHA256 fd21c7ca4637b0221250a14b9fcfb6ebc3b734e659ad80151be4bc579db818f1
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            rules.json
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\rules.json
                                            • Size 839B
                                            • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            276498be-6b61-4059-b56b-e4a30f6a7e9c.tmp32566656-c3b9-424a-be57-d1638bb2959e.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\276498be-6b61-4059-b56b-e4a30f6a7e9c.tmp32566656-c3b9-424a-be57-d1638bb2959e.tmp
                                            • Size 27KB
                                            • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            4bdc8a2c-89c5-48d4-8b31-9201e3a05798.tmp15478a8e-8881-4995-979e-2554caca1758.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\4bdc8a2c-89c5-48d4-8b31-9201e3a05798.tmp15478a8e-8881-4995-979e-2554caca1758.tmp
                                            • Size 27KB
                                            • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            5b82786f-92b6-4536-a3ce-f3a304ecdc29.tmpf7b077ae-5055-4204-b4ee-62b3d4cab935.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\5b82786f-92b6-4536-a3ce-f3a304ecdc29.tmpf7b077ae-5055-4204-b4ee-62b3d4cab935.tmp
                                            • Size 27KB
                                            • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            5fd72ba2-cb32-48fa-a8d1-60b439915b15.tmp63f9e4bb-ade3-4251-afe2-2c03d5801ede.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\5fd72ba2-cb32-48fa-a8d1-60b439915b15.tmp63f9e4bb-ade3-4251-afe2-2c03d5801ede.tmp
                                            • Size 27KB
                                            • SHA256 353f070543d1c43247d565c23d4c0346a8d65d902aa7bae04c6ae5e64bc5cde7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            7d12c029-4bbf-4f94-8a08-a00b80c13fdc.tmp5566f73c-38c3-417d-84ab-cb68c0ccbd3c.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\7d12c029-4bbf-4f94-8a08-a00b80c13fdc.tmp5566f73c-38c3-417d-84ab-cb68c0ccbd3c.tmp
                                            • Size 27KB
                                            • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            9eaa0aad-bc75-4bed-8289-745482e6964f.tmpc53d2e3e-057b-4ef0-90b2-2fc2d52caadd.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\9eaa0aad-bc75-4bed-8289-745482e6964f.tmpc53d2e3e-057b-4ef0-90b2-2fc2d52caadd.tmp
                                            • Size 27KB
                                            • SHA256 b8f0a6164e126d0f70798a96f456487080b5473bee571bb9594600f8a53901c7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Network Persistent State
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                            • Size 1KB
                                            • SHA256 7780f6b9046bdfcf105a42e347aa3d22932779654fb33361a32716d20a83f4aa
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            SCT Auditing Pending Reports
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\SCT Auditing Pending Reports
                                            • Size 2B
                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            Preferences69ddb541-24c1-4b98-a113-dda5ac1795d8.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences69ddb541-24c1-4b98-a113-dda5ac1795d8.tmp
                                            • Size 15KB
                                            • SHA256 9baf7558c8102c298749ee1aabd2f409d0019fd545005d9d8d75645e117c9577
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Preferencesb85818ec-78fd-4375-86d7-3b01b342d98a.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferencesb85818ec-78fd-4375-86d7-3b01b342d98a.tmp
                                            • Size 15KB
                                            • SHA256 e613b890c08fc2a2bb161874f924ab4d26bb28436b8c43ef2a4513b8eeefc7d3
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Preferencesdacee0be-07c1-4f34-8bcd-7e6df12e014c.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferencesdacee0be-07c1-4f34-8bcd-7e6df12e014c.tmp
                                            • Size 15KB
                                            • SHA256 fd58d11b377d13144a457d44c2676d85625f64cd30a5582ce7915e912cfcfda3
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Preferencesec7335ae-4519-4053-af9e-9106946be275.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferencesec7335ae-4519-4053-af9e-9106946be275.tmp
                                            • Size 10KB
                                            • SHA256 729dd251212adbad4c6edabe82bb55e414f3931e4dea4406f34791cc7f2c3416
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Secure Preferences8449d7ca-63ad-416b-bbb5-a91847123fad.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences8449d7ca-63ad-416b-bbb5-a91847123fad.tmp
                                            • Size 82KB
                                            • SHA256 67f3266fa685ddfdb9336b7fa00e58ff3f5be695ccfebfd9aa938cd38004b6f3
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Secure Preferencesd4ed10bb-d3c4-480f-9193-0ccc350c313e.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferencesd4ed10bb-d3c4-480f-9193-0ccc350c313e.tmp
                                            • Size 109KB
                                            • SHA256 f1f0e3b7fbf61ecc80d7805187b67ee0fe74d0efb838fd6b6bca2901c13b4964
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            index
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index
                                            • Size 24B
                                            • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            temp-index
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                            • Size 360B
                                            • SHA256 7592c610df62127002d2dd37af658d4fe52484a35cd5a43cc97aee5d10187713
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            temp-index
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                            • Size 120B
                                            • SHA256 5edcd48bebba5561ded27271c0ff9db397c328e2fbfea67fd206e9d25316063e
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            the-real-index
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                            • Size 72B
                                            • SHA256 27b9fb595e3b9677f98b0495e59d0fc9c70a5a23d8b94600b6bf6445eacd0cf3
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            CURRENT
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Site Characteristics Database\CURRENT
                                            • Size 16B
                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw
                                            • Size 381B
                                            • SHA256 5cf0de2b135678695b9370f99c264535dcc6eeb490fbf1a6aa9de14c2bc98392
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw07902396-52d5-4ba5-883f-b654f9df0877.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw07902396-52d5-4ba5-883f-b654f9df0877.tmp
                                            • Size 9KB
                                            • SHA256 adeed007064fc2fe1f7d1751407d9b42e388aa5637102baaa6565b4fd047046e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw0b28c868-7677-4423-9efa-bc24fb32b35b.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw0b28c868-7677-4423-9efa-bc24fb32b35b.tmp
                                            • Size 9KB
                                            • SHA256 1cf27e68623a8ba4bd5ef1cae30ecb8d20407719ea4fd10d7a1d9e135c81f7e0
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw1359e0a0-7ccf-43c4-90a1-42f87e29a65a.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw1359e0a0-7ccf-43c4-90a1-42f87e29a65a.tmp
                                            • Size 621B
                                            • SHA256 93730d4b81af0fc8cf5e79e31568c9e6e362cb1d098524840b015b3515fc5a6b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw1ac4f51b-fb83-4c68-969c-274e9db97622.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw1ac4f51b-fb83-4c68-969c-274e9db97622.tmp
                                            • Size 10KB
                                            • SHA256 50aac702a270f8f0f9f9aa7f75e48c2e0715b470c2b0acd266e35c6912933919
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw1ba18e68-1006-4884-b1a9-3312b2eef819.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw1ba18e68-1006-4884-b1a9-3312b2eef819.tmp
                                            • Size 973B
                                            • SHA256 46e49739d0a3d70b0b2ea08311e7d821ca749a53b7e573db10a448d310672a6f
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw1d4887cf-ae32-4678-a047-83bff8145ed3.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw1d4887cf-ae32-4678-a047-83bff8145ed3.tmp
                                            • Size 8KB
                                            • SHA256 88a8eaa8d2a46ce554a8660431ad72b89341b9492196cad0b5efe75d13edbb88
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw22f130e5-675e-45c0-9e7f-74e141ffc31d.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw22f130e5-675e-45c0-9e7f-74e141ffc31d.tmp
                                            • Size 2KB
                                            • SHA256 2daabbbc6566a78a0b20f5a35152a88c3d7fc0ac88cc300fbf95d5867f9f9e72
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw25ce7854-8b25-460c-975c-10740d8f24aa.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw25ce7854-8b25-460c-975c-10740d8f24aa.tmp
                                            • Size 1KB
                                            • SHA256 ea64eac619440e65c70cfb3506c682d276f71ff17b91ec2c66c363aa2c329df3
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw31ca2112-91f0-4aa6-89de-e11cb1f3c144.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw31ca2112-91f0-4aa6-89de-e11cb1f3c144.tmp
                                            • Size 8KB
                                            • SHA256 b8ccb06d3651a7cf5bb4b718825581dcc8b49b19152626ddb6a1ffc8bbb407fa
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw34a8791a-5b12-4a6d-9b1f-1d40dc4de5aa.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw34a8791a-5b12-4a6d-9b1f-1d40dc4de5aa.tmp
                                            • Size 7KB
                                            • SHA256 ec2137a27f5a28a701b6693fe4dde66e3568d13ab05d828e7e8a0a316dc42276
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw3838cc81-59cd-4589-b60f-3b6dc4145f74.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw3838cc81-59cd-4589-b60f-3b6dc4145f74.tmp
                                            • Size 9KB
                                            • SHA256 e7b14cedece5a11f5b153cf05d08ec8805af6137fd13e9826496a88d14472082
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw3b482c5a-cd69-4311-8e31-4598b54922db.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw3b482c5a-cd69-4311-8e31-4598b54922db.tmp
                                            • Size 749B
                                            • SHA256 8382e18762595db014bb4b218c1961db01687cb2c06b8a06154393381a98f60c
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw49b577cd-3fc6-4d8e-ba4f-28f94e7b0867.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw49b577cd-3fc6-4d8e-ba4f-28f94e7b0867.tmp
                                            • Size 7KB
                                            • SHA256 4688f3543eb4768a0d9c83c873614eb4a72e689a7dbe5bfb35202e8072638ef4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw49dd8299-1044-4101-bfe3-7bb50d55564c.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw49dd8299-1044-4101-bfe3-7bb50d55564c.tmp
                                            • Size 1KB
                                            • SHA256 6ed0857694c69c78ffb9ad097eb38d484d1c16d1fb9e5542b4c3e39d326cdd90
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw60da9265-cdd2-4439-9151-776da8663917.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw60da9265-cdd2-4439-9151-776da8663917.tmp
                                            • Size 9KB
                                            • SHA256 4f6a88df4e3b7ba77aa3820bae2fc4367c51c527d3e09a823a70ac1bd0e2189b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw6982ca91-5cbd-428b-8b06-5cfd4a98f934.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw6982ca91-5cbd-428b-8b06-5cfd4a98f934.tmp
                                            • Size 1KB
                                            • SHA256 8b22351044eda053dafc76ccef62e2b8a40301078a6c17a20e8a9a1421b233d7
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw6b4d58eb-967b-4c2f-ace5-e47d1f2f3e43.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw6b4d58eb-967b-4c2f-ace5-e47d1f2f3e43.tmp
                                            • Size 10KB
                                            • SHA256 721f6bf99be66611451a7f49327a296704fdf9646718f473a8a90b21619d15d2
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw6c97c32c-a69c-49ed-965c-151f1f31c6e2.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw6c97c32c-a69c-49ed-965c-151f1f31c6e2.tmp
                                            • Size 925B
                                            • SHA256 7757cad4257ee16150a92084e06f47bf1650fca6876f8e0020db4c503f36c50b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw703ab2a4-c32f-4162-a248-3523e14b5146.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw703ab2a4-c32f-4162-a248-3523e14b5146.tmp
                                            • Size 9KB
                                            • SHA256 f770f8a57e18159648164450264b1c39e4370f6a24c696ef02759db9aa43bbd7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw73c599ec-d137-4a18-849a-5b9937b76357.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw73c599ec-d137-4a18-849a-5b9937b76357.tmp
                                            • Size 9KB
                                            • SHA256 98f49cef0660b541b4596eba0667091e4dc470214b09a74c686dd2e252c54d7e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw7b011a5c-4df4-4476-b862-54cbf01d791b.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw7b011a5c-4df4-4476-b862-54cbf01d791b.tmp
                                            • Size 10KB
                                            • SHA256 d7d7dff7e04db563b2e9de5ca4d21b8d7ba5cad33ba6c872f64b2fabd6114dec
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw7b34abe2-704e-4ade-9852-858afb3ab017.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw7b34abe2-704e-4ade-9852-858afb3ab017.tmp
                                            • Size 10KB
                                            • SHA256 14e970edd791e3862e31e75cd029834301c50e57be2a7ccc767a34b9d0a0f4d4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw7b46a0cb-6853-405b-b3ad-d05f7a8b6b51.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw7b46a0cb-6853-405b-b3ad-d05f7a8b6b51.tmp
                                            • Size 1KB
                                            • SHA256 3f9d34fbca011e404cb87d5dcabd867f76363593d3623d1bf7fd8e9faa659a05
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw7b8705b8-f3df-4bbb-b72b-80e48d05236f.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw7b8705b8-f3df-4bbb-b72b-80e48d05236f.tmp
                                            • Size 10KB
                                            • SHA256 4fd902e15493285bb21c13bfb4a062afe082d31b66348f1dd43e1655efbb70ce
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw7cfc9dba-4282-40db-b506-2791841d1012.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw7cfc9dba-4282-40db-b506-2791841d1012.tmp
                                            • Size 9KB
                                            • SHA256 2bdd505611b3d68b3108a2091a77baec8162929305ebfc4d030a32eb75f39f47
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw7fd44246-8063-44d6-93c2-f2b959901470.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw7fd44246-8063-44d6-93c2-f2b959901470.tmp
                                            • Size 6KB
                                            • SHA256 f683e3412f13962ee3c3f35edf9dc1d536c213f6c4bf270dfc9664cfa1022197
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw816b9c0f-f201-4123-8beb-36c1c305ed77.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw816b9c0f-f201-4123-8beb-36c1c305ed77.tmp
                                            • Size 1KB
                                            • SHA256 e57741da34b33926d7d81cb0f7d5f68ca570081dea268cb7528f1ab6ebe7c347
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw81dd19e3-1073-4f5e-8474-c213c5d2c362.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw81dd19e3-1073-4f5e-8474-c213c5d2c362.tmp
                                            • Size 9KB
                                            • SHA256 7f390c2aaf3f51fcc1e726e2dc6b15c86f49f32c87bf5f06f22de3199a66345f
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw83651905-a9b8-46dc-931a-2c0cd1563a74.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw83651905-a9b8-46dc-931a-2c0cd1563a74.tmp
                                            • Size 1KB
                                            • SHA256 daf4e82592f25f104196a2e87ef485bc9ec7ad93905bc390091bb3d4820b7557
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw836fe9f8-93e9-4bbe-909f-3d77ad49b8a2.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw836fe9f8-93e9-4bbe-909f-3d77ad49b8a2.tmp
                                            • Size 1KB
                                            • SHA256 559cf8a888cc15c9154653600651f8b4dd9e489777ba3c59328ff2d14ec46313
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw83e1cc3b-9f3c-4a00-ac1a-ff9d5cb7df22.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw83e1cc3b-9f3c-4a00-ac1a-ff9d5cb7df22.tmp
                                            • Size 7KB
                                            • SHA256 6e0988ebb06471f95d7c052725378814938f73dc56ec5cc08388157b0a6f5609
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw853a69f7-bf5c-4599-bf12-b6ec7910cc97.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw853a69f7-bf5c-4599-bf12-b6ec7910cc97.tmp
                                            • Size 1KB
                                            • SHA256 edf722aa912aa6de5eeea64a82fc2b2e0b9c8d7668c6acd36c122a026f43e39a
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw8825101c-0fc1-4871-8ff4-e38f4fb7fa43.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw8825101c-0fc1-4871-8ff4-e38f4fb7fa43.tmp
                                            • Size 8KB
                                            • SHA256 8fd7e7dd8586df94310ab16d40c0bc02b59a386b838aeab82a6c6f147a67d4c0
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw8c1576a4-8d9b-48f0-a5dd-6c74ed936946.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw8c1576a4-8d9b-48f0-a5dd-6c74ed936946.tmp
                                            • Size 8KB
                                            • SHA256 5d2ac6f0ced03a7fdc5e4e2cc53c0fe184551c57755e0608914322c264f422a9
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw8d86fc40-9c81-4976-9504-92d2ca2675f6.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw8d86fc40-9c81-4976-9504-92d2ca2675f6.tmp
                                            • Size 9KB
                                            • SHA256 b1e88c6c710dec9a1914404e435b2a357c079d1bd4f5361933eb59834f924569
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw8e28d13a-02c0-4139-a806-948454f95fe7.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw8e28d13a-02c0-4139-a806-948454f95fe7.tmp
                                            • Size 7KB
                                            • SHA256 7b549c4310f4f0c220832ec68ee3080b415e2bb204e3de526279c6a28940e7b1
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw9251dce8-9d2b-458e-a867-f60085165ae9.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw9251dce8-9d2b-458e-a867-f60085165ae9.tmp
                                            • Size 1KB
                                            • SHA256 905d3034ec4f6ad01fc73aebb638639b0f1457e8800268f962b4fd519a9427a1
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.raw966394d2-5487-4a2f-9130-ef1714aee7ef.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.raw966394d2-5487-4a2f-9130-ef1714aee7ef.tmp
                                            • Size 11KB
                                            • SHA256 60c2e01f60a6bfe50639dfe94fcf4006186107b4c8267acf8d69407de653f331
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.rawa0a15450-8496-49b4-899b-11d8943c9ec1.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.rawa0a15450-8496-49b4-899b-11d8943c9ec1.tmp
                                            • Size 9KB
                                            • SHA256 ed78e3e1d5fa963a091404892b199251380d6968b2f86e30100cdcba136fc8e1
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.rawa1e171e1-68c4-4158-b370-cc2e3e75e7ee.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.rawa1e171e1-68c4-4158-b370-cc2e3e75e7ee.tmp
                                            • Size 8KB
                                            • SHA256 d3020dc9b96806dffad87c8a5440a4d3d4be012912c1c50ed79f0b86ceafe14a
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.rawab917a69-8d6f-4826-97ac-d93fc722f438.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.rawab917a69-8d6f-4826-97ac-d93fc722f438.tmp
                                            • Size 9KB
                                            • SHA256 12b2941490f6efbe2bb40f3c21a17eb2909c9ce2b8c7e450ee8b41241e607268
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.rawaba1ba99-5536-49fd-9f66-b038d5e0ac4f.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.rawaba1ba99-5536-49fd-9f66-b038d5e0ac4f.tmp
                                            • Size 8KB
                                            • SHA256 3ac22dae779c17e94b6ec8ef9851b1c84eb583d47dd361053fee6d02cb792745
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.rawae30c752-e499-4f9d-a52a-4aa04b36e183.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.rawae30c752-e499-4f9d-a52a-4aa04b36e183.tmp
                                            • Size 8KB
                                            • SHA256 a08e54f7e6f2867dc102945b8a0a61d670c34e18c3aa7fe454e99525449b20ed
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.rawb155deb1-f543-4bde-b69e-905cf3d4bc39.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.rawb155deb1-f543-4bde-b69e-905cf3d4bc39.tmp
                                            • Size 9KB
                                            • SHA256 c01f1bedbf63f27016f6bcb13c2cc4932f8dc55f4d184f5187b9b1b27feb6cb4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.rawb2b8c810-2172-4d73-bf17-31f2654a1a43.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.rawb2b8c810-2172-4d73-bf17-31f2654a1a43.tmp
                                            • Size 9KB
                                            • SHA256 9aaeada3a3617bafcc8e285660e43c45d52a5362e1b15dec3a06e7935981828f
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.rawc3363ec5-6872-4a11-b876-93b082966c4e.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.rawc3363ec5-6872-4a11-b876-93b082966c4e.tmp
                                            • Size 8KB
                                            • SHA256 e5f5fc2f05d5417f0188be7db593914f1dde646d4e9a444acfbe731893e5fb33
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.rawc8d55d91-d898-46c5-bbed-7c1c69ac2dc9.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.rawc8d55d91-d898-46c5-bbed-7c1c69ac2dc9.tmp
                                            • Size 8KB
                                            • SHA256 f2d878a0f6beb2eb30dec596d1531576db8d2fbc4d083e599458b24e9b4006b8
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.rawcd9c1990-cd97-42f1-9404-22cd68f0c3e5.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.rawcd9c1990-cd97-42f1-9404-22cd68f0c3e5.tmp
                                            • Size 8KB
                                            • SHA256 e0d98d14be930c2ba4ea0a1c2f25da37a41086bb1aec3debc42cbc6f907d10f2
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.rawd9083bc4-1012-4c5d-b961-53d842eb1fbb.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.rawd9083bc4-1012-4c5d-b961-53d842eb1fbb.tmp
                                            • Size 9KB
                                            • SHA256 02097b5331a52d5e74f1a2cd5938a59ce0cbf71078a506150331455e6ff259d1
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.rawd9e7055c-5c29-4edf-98fa-9b470a9c84e5.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.rawd9e7055c-5c29-4edf-98fa-9b470a9c84e5.tmp
                                            • Size 9KB
                                            • SHA256 3e51358373c9b33a9ea85706dad954f4e0f6b162a612302c703b8f29f6320379
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.rawdbb36887-17d7-434b-8909-3850bc6c397f.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.rawdbb36887-17d7-434b-8909-3850bc6c397f.tmp
                                            • Size 11KB
                                            • SHA256 2edf44d1e7bfa775dcbf3a34b1a2b61f27485de521414943fc1aa9e2acb7cf2c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.rawde15a5e1-bb52-41df-b1cb-7628ef1f2284.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.rawde15a5e1-bb52-41df-b1cb-7628ef1f2284.tmp
                                            • Size 9KB
                                            • SHA256 cae1596d78586b4d000b5aaff1565c715026a57b4d31ec3ee98d5718514cf1fb
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.rawe6d93e06-96a1-41b8-90b6-a97f02283626.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.rawe6d93e06-96a1-41b8-90b6-a97f02283626.tmp
                                            • Size 8KB
                                            • SHA256 db9f75f5aaaac455180620b3064cae260873a219002d2639848fadab9b61d224
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.rawebe89513-bc74-46db-8ef6-43b52ae05b2d.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.rawebe89513-bc74-46db-8ef6-43b52ae05b2d.tmp
                                            • Size 493B
                                            • SHA256 dae88e4544c5044e3d8a5e3d000bb8d92a82d3e2017cb195078464b2447fc2bf
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.rawec53b8a8-3fbc-410b-b8ca-06208feae300.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.rawec53b8a8-3fbc-410b-b8ca-06208feae300.tmp
                                            • Size 8KB
                                            • SHA256 a3df692cccf9b0a6ce697f1fdc9c2cb7bbfecfa528bcd6cd127545573e2aaa6a
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.rawee26b9cd-a98e-48f2-9520-6ce270cb4b8e.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.rawee26b9cd-a98e-48f2-9520-6ce270cb4b8e.tmp
                                            • Size 9KB
                                            • SHA256 327883208d4418d990971fd611e6d7ee19a2f123ab902df202157b9faae5d236
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.rawef1d35ac-2d1e-41fc-b95f-8836e16ae9a8.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.rawef1d35ac-2d1e-41fc-b95f-8836e16ae9a8.tmp
                                            • Size 10KB
                                            • SHA256 70c6f7311a3642dd00056a54a27ca7f417aa11d2b175f7c578ef788698c7226f
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.rawf226e791-815f-4e07-89e3-abdf4326099b.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.rawf226e791-815f-4e07-89e3-abdf4326099b.tmp
                                            • Size 10KB
                                            • SHA256 cadbcc3033896d778900cc59ebd58ca9be7cf58bdc3d8c589aaed868deaa9d3d
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.rawf39dc616-eeb4-49d7-a6ba-f90915a61eed.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.rawf39dc616-eeb4-49d7-a6ba-f90915a61eed.tmp
                                            • Size 1KB
                                            • SHA256 1c3cb182cbf5b8487e496e604836f6693aa24186a0d13962834ebec3fe6f3463
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.rawf6688dd9-ee49-4e4b-a675-9d9d7c685f73.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.rawf6688dd9-ee49-4e4b-a675-9d9d7c685f73.tmp
                                            • Size 10KB
                                            • SHA256 d994ad2326e525679568da64873aa729057a68b52b484f19416e14a2d1cf649d
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_048da00d-b4b0-48ef-b503-80962f737bc8.rawffc26ec6-f401-43b4-9328-88b89cfc13a3.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_048da00d-b4b0-48ef-b503-80962f737bc8.rawffc26ec6-f401-43b4-9328-88b89cfc13a3.tmp
                                            • Size 9KB
                                            • SHA256 c852a3acb372ec3d467895463e1a896aeddea036171845caf038849d3cea2e7f
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.raw
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.raw
                                            • Size 381B
                                            • SHA256 9aa4a19f7010e8b206452dcbf928b196ec7a60c8f54292c6229fc9291f169eff
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.raw1d77931a-3d5e-473b-9eb6-4b012ebfac2b.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.raw1d77931a-3d5e-473b-9eb6-4b012ebfac2b.tmp
                                            • Size 957B
                                            • SHA256 2898461f13c4a9aa3e21bd1c2f9a773df880a3181c82fa84e3839eae25550639
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.raw297d6df5-e1d5-4fb3-a5c0-7d3c3a074899.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.raw297d6df5-e1d5-4fb3-a5c0-7d3c3a074899.tmp
                                            • Size 1KB
                                            • SHA256 c4210156b844bc5304462af5f017c4dde64b20dc417f7b5a2f0d82b78e01c31e
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.raw5968c9d5-ab3a-4628-8627-7dbf52cafb14.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.raw5968c9d5-ab3a-4628-8627-7dbf52cafb14.tmp
                                            • Size 781B
                                            • SHA256 7d3025a7e366ce06fc6979fcedb209b29ea4be21b54aa74137ccef927c4af238
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.raw86ce977c-a337-449d-bcb5-a5b11450849c.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.raw86ce977c-a337-449d-bcb5-a5b11450849c.tmp
                                            • Size 1KB
                                            • SHA256 20cad99b977ff5506abbf6cebb59591cf1946cf1bc9f7303793f62a1c7a8744d
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.rawa7de01af-ff4b-4e9e-9637-72b645f58575.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.rawa7de01af-ff4b-4e9e-9637-72b645f58575.tmp
                                            • Size 1KB
                                            • SHA256 cd8599cc76312055668753ef19eab40e31e46cd066f6eb60390f6fd85a830323
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.rawde7e5225-d71b-42ed-92fb-4906db13ce43.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.rawde7e5225-d71b-42ed-92fb-4906db13ce43.tmp
                                            • Size 941B
                                            • SHA256 3ac12aee802eb37f5c52f25e983efee34a93f7f929dae0ac40464eb4acba4b99
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.rawe77d9452-f685-40b5-8752-ecde533d92bb.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.rawe77d9452-f685-40b5-8752-ecde533d92bb.tmp
                                            • Size 1KB
                                            • SHA256 1741bdc0b32c623be090381c31e669dddcf1c40ccef4f5cab8f057ffdc2ffb48
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.raweb6a41b5-392b-44cc-a1f7-3e43ef93328b.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.raweb6a41b5-392b-44cc-a1f7-3e43ef93328b.tmp
                                            • Size 957B
                                            • SHA256 1dfa0e9ca19d8d6660b3e2a97327d09f71a3dbef10093e5e93d0292f24c1b2ec
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.raweea7e02e-eeb2-49ef-80f8-5157aee7f769.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.raweea7e02e-eeb2-49ef-80f8-5157aee7f769.tmp
                                            • Size 1KB
                                            • SHA256 682a982394d0eaabcb06dcb03dab69103986acc020ef89bc626db5357c51a7c5
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.rawfb6b739d-0e61-4dee-91a5-5d10d9ac86bb.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.rawfb6b739d-0e61-4dee-91a5-5d10d9ac86bb.tmp
                                            • Size 493B
                                            • SHA256 14ea4209a0b69aa746d98639f2c114b17ef506a82f3545074d1ca01c123fb9c6
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.rawff28b824-8c24-4b3f-98f9-242adcb1ff27.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a357efd3-1c81-43c3-bf5c-395afc7ccbb3.rawff28b824-8c24-4b3f-98f9-242adcb1ff27.tmp
                                            • Size 605B
                                            • SHA256 b59524fb1f5bb0d6f8dad572b11b75057e614e30cfde6264023bbb0e6caa9302
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            MANIFEST-000001
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\MANIFEST-000001
                                            • Size 41B
                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            rhs.dat
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\rhs.dat
                                            • Size 113KB
                                            • SHA256 757aecbf356f38401e701a42d20954cb7cc3a4db011da203573f1068c01852db
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            ssdfp3004.0.1107468021
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3004.0.1107468021
                                            • Size 203B
                                            • SHA256 6cdf7f7b4195567d6305622c269b9e194802b830a1edd05dbdec132ada20c798
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp3004.0.110746802146b962d9-b9ab-449e-934d-72dfbcbb3ff4.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3004.0.110746802146b962d9-b9ab-449e-934d-72dfbcbb3ff4.tmp
                                            • Size 265B
                                            • SHA256 6c2eece714ff33e44b73a8726005576728401324736d9787049f7ca0dfaa4000
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp3004.0.11074680214c466384-80c4-4bbf-8e89-359d52df5db4.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3004.0.11074680214c466384-80c4-4bbf-8e89-359d52df5db4.tmp
                                            • Size 1KB
                                            • SHA256 466a1a6f99815ac89e1a01ff6c537f464d10ed6b8de7efccb2a5d37ca795d453
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp3004.0.11074680216f6eeec6-4834-4944-8e9a-87a3d54df914.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3004.0.11074680216f6eeec6-4834-4944-8e9a-87a3d54df914.tmp
                                            • Size 980B
                                            • SHA256 c4b4718d144c72e0b5caa4f7b9ba2ed575536f4bfe088f18e1ad0ae582479d3c
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.0.1573293269
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.0.1573293269
                                            • Size 371B
                                            • SHA256 310ec7d6741db1a8e1e7c30fa09836e9e72151425b1d6b4743444c304b1d3378
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.0.157329326908147c19-fc96-42bc-b844-d0586dfede49.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.0.157329326908147c19-fc96-42bc-b844-d0586dfede49.tmp
                                            • Size 1KB
                                            • SHA256 876dcc7412f5b91b6f462dd9892d2cb3a8f10e21ff4e3931f4a297bf92135005
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.0.15732932690a79bebf-a5c0-4644-89ea-60c9c5df1112.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.0.15732932690a79bebf-a5c0-4644-89ea-60c9c5df1112.tmp
                                            • Size 2KB
                                            • SHA256 2ff1ea7816368a76e3614f7bdc56fb89ce95832847a71e89d1a8461d159d4236
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.0.15732932693181e89b-9468-457c-bcf3-88349a04088e.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.0.15732932693181e89b-9468-457c-bcf3-88349a04088e.tmp
                                            • Size 2KB
                                            • SHA256 b47fd9ff3723cbb00d1f7ff7cd8dc153a1a449d22e8160e5546670fc5932f6a6
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.0.157329326931f0bc1f-4d40-424b-b2ea-6c986a2755bc.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.0.157329326931f0bc1f-4d40-424b-b2ea-6c986a2755bc.tmp
                                            • Size 2KB
                                            • SHA256 12a0b02d1ec713fd7511c628464a005d8494f8beb66e4bbe0ed72c099817b585
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.0.157329326951c5c093-f2f1-4b92-9338-8c2dc9694844.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.0.157329326951c5c093-f2f1-4b92-9338-8c2dc9694844.tmp
                                            • Size 2KB
                                            • SHA256 3d6a364516395a8ecbf7bda0209a0715b18d887537309a3f479efda61b8fab8c
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.0.157329326973a8308b-4eda-4aa7-9feb-b29adb26a940.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.0.157329326973a8308b-4eda-4aa7-9feb-b29adb26a940.tmp
                                            • Size 2KB
                                            • SHA256 c9040ee9164844fc4f203cfcc30e72b179ea92725b6137ead9e429dec73134a1
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.0.1573293269852d7eb1-12ed-454d-bcbd-d810911715f5.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.0.1573293269852d7eb1-12ed-454d-bcbd-d810911715f5.tmp
                                            • Size 469B
                                            • SHA256 cbe088766ec479b5d3b9b430328fcfb468006d266ec2a2d1aed594412374e47a
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.0.1573293269ad1e6118-7ef9-41b6-a055-6fa0cb1a5a37.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.0.1573293269ad1e6118-7ef9-41b6-a055-6fa0cb1a5a37.tmp
                                            • Size 2KB
                                            • SHA256 062f5f92b485427a2d74dff0bdfeb3433f6df608f9202472c72a3a7d8002cf07
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.0.1573293269c23cca1e-6fdd-4acf-a2e5-e4d3356f3776.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.0.1573293269c23cca1e-6fdd-4acf-a2e5-e4d3356f3776.tmp
                                            • Size 2KB
                                            • SHA256 0b30364f662869a4dcff93eed959280a2ccd9ebcee9dbf06942831efd8ea758b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.0.1573293269d68b44e4-c7a2-4077-b152-c8dea51fb455.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.0.1573293269d68b44e4-c7a2-4077-b152-c8dea51fb455.tmp
                                            • Size 2KB
                                            • SHA256 50abcf8b5da7d7c590322128f5f9ab15bf3da30ab260bcf69bd1c4ca55aa2969
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.0.1573293269d7e398c5-2cdf-4581-a8a3-c5121eefcbc1.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.0.1573293269d7e398c5-2cdf-4581-a8a3-c5121eefcbc1.tmp
                                            • Size 531B
                                            • SHA256 f20d6ba52c5f8435fa156e891c0a4f1f4fb24c6eb4e7024d8a1c1be57bcfd710
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.1.1071904050
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.1.1071904050
                                            • Size 171B
                                            • SHA256 8e0d06a2ee851f8339d3a291692a5ece7f2c8f590b14d5324a590ec41fc793f5
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.1.10719040500939bf7d-e190-4159-ab9f-b442ad96b122.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.1.10719040500939bf7d-e190-4159-ab9f-b442ad96b122.tmp
                                            • Size 913B
                                            • SHA256 fa076b6a269189038df3a79de9cb9b35d9ca4def17297e2adcec26c71d9f7eb0
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.1.10719040500f438b4b-bcfe-488f-8ded-0e6cdd3c1ce9.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.1.10719040500f438b4b-bcfe-488f-8ded-0e6cdd3c1ce9.tmp
                                            • Size 1KB
                                            • SHA256 f94a8da88dab77c38d4a933c86d4daa122938b07cef592c52183f987d761dbd8
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.1.10719040501e41cad2-a0d0-4960-b8d8-00a36b7530a5.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.1.10719040501e41cad2-a0d0-4960-b8d8-00a36b7530a5.tmp
                                            • Size 237B
                                            • SHA256 23b08586be43a79fec4bc2ac214965759687ac95e2126615ee3b72efcb29661b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.1.10719040501fffc3d7-69b0-4914-9b0a-46390cf994be.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.1.10719040501fffc3d7-69b0-4914-9b0a-46390cf994be.tmp
                                            • Size 723B
                                            • SHA256 7412b16e4b6f504711b834ce2cb3e24b586c776e508ead4275767c4f53b56a24
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.1.107190405024c110dc-d463-4356-9923-9cbe8aab6444.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.1.107190405024c110dc-d463-4356-9923-9cbe8aab6444.tmp
                                            • Size 1KB
                                            • SHA256 91b23d6558347d022991a512379cef401d02cafe68e1c64e5aa2c32189c7dc62
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.1.1071904050397dddfc-54bc-472f-941b-77d35ba66302.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.1.1071904050397dddfc-54bc-472f-941b-77d35ba66302.tmp
                                            • Size 355B
                                            • SHA256 020212994824dd40585f6f0dce94f5f0a558d6492cf523d1cf8dd1349ee70067
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.1.107190405040996906-c907-4b51-8f54-03622851bfa0.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.1.107190405040996906-c907-4b51-8f54-03622851bfa0.tmp
                                            • Size 1KB
                                            • SHA256 a623e4324a9ce4813ccd2071c02575b6c9e2fef87d769809f3031b414388b079
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.1.10719040506f0f00b8-a4f9-4cfc-a267-95c0b17e2c53.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.1.10719040506f0f00b8-a4f9-4cfc-a267-95c0b17e2c53.tmp
                                            • Size 636B
                                            • SHA256 a18fbc5110c1269d52bd6dbd5cdd588db5bccedce2c9c95057189a6562d43c51
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.1.10719040508c72f6f4-fd3e-4bf2-85f4-1c16324ffb64.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.1.10719040508c72f6f4-fd3e-4bf2-85f4-1c16324ffb64.tmp
                                            • Size 546B
                                            • SHA256 e8cd807dbcb569dcdd5b3ee012226e33115117b045a9e768883c300072c2ff3e
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.1.1071904050abedf5fa-c00d-41c8-a988-39161e9e4a3b.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.1.1071904050abedf5fa-c00d-41c8-a988-39161e9e4a3b.tmp
                                            • Size 448B
                                            • SHA256 aa9b49137d86535d0730b37a7f159924c8d5670459910a08fde46e9a70a367b2
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.1.1071904050b776e30d-073b-4898-9d57-c913f093f407.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.1.1071904050b776e30d-073b-4898-9d57-c913f093f407.tmp
                                            • Size 817B
                                            • SHA256 195b318f7ccc309dd3d3ab005dfcc6866106765cfc0f39eb39fb4229f1434996
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.1.1071904050ccbe6364-643d-4ff6-87da-d850df6522d3.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.1.1071904050ccbe6364-643d-4ff6-87da-d850df6522d3.tmp
                                            • Size 1KB
                                            • SHA256 2703684a89f34afa8c73c45c43bb4456150a474dabf0282209d1ed4d6c31a080
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.1.1071904050d020b758-0c7f-4c9b-98a7-16bcc8e37e4d.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.1.1071904050d020b758-0c7f-4c9b-98a7-16bcc8e37e4d.tmp
                                            • Size 1004B
                                            • SHA256 8cd68df04c85e3b3ca98d88a810072e86d21fcffe3ef5252579cbe3827c336fd
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp7124.1.1071904050edfc4c1c-7dce-4e42-8451-a69e60a95007.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7124.1.1071904050edfc4c1c-7dce-4e42-8451-a69e60a95007.tmp
                                            • Size 1KB
                                            • SHA256 0f14442915ab5ca13bb17a336173a464956341b1eb323007b4b7528ce3c6f6b0
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            suggestions_cache.json741b99af-fed6-4478-a429-b376dc11d040.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.json741b99af-fed6-4478-a429-b376dc11d040.tmp
                                            • Size 652KB
                                            • SHA256 93b553c17f3c9ddae747589188b517f02379c38cb2589a243217f295e0c8640d
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Local State1291e29f-3b5a-41d6-a436-2755ea7ce398.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State1291e29f-3b5a-41d6-a436-2755ea7ce398.tmp
                                            • Size 5KB
                                            • SHA256 80a9a074f037e1caad555252d7fcdef9bd8b7e09eb3ad07fca253b945cfd18c1
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Local State156f51db-07a1-45bb-8893-85ccca4a27b6.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State156f51db-07a1-45bb-8893-85ccca4a27b6.tmp
                                            • Size 4KB
                                            • SHA256 d36cc64539ddaccbf1d9dc29b321813fb9cd9d82add9bb2dcd21e8d971369a21
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Local State59cf60c5-7388-4a9a-aede-2d49644ed0d0.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State59cf60c5-7388-4a9a-aede-2d49644ed0d0.tmp
                                            • Size 3KB
                                            • SHA256 57bb0d88d1c90a276db3cf463bbc3bcca8f15861b299bf89506a08d07ca50118
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            VariationsSeedV28801b375-be5f-4a5d-9203-23221ab24482.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV28801b375-be5f-4a5d-9203-23221ab24482.tmp
                                            • Size 19B
                                            • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            VariationsSeedV2d764e726-fabd-4ecb-a31a-25c7f53dd55d.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2d764e726-fabd-4ecb-a31a-25c7f53dd55d.tmp
                                            • Size 11B
                                            • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            clipboard_injection_guard_rules.json
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\clipboard_injection_guard_rules.json
                                            • Size 6KB
                                            • SHA256 b8d84b82da3d90323de6cf1b4e3594bf7acb99101c72379b10f4b982f82bd487
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            metadata.jsond1aee78e-f3dc-458b-97ed-271d44114514.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\extensions_crx_cache\metadata.jsond1aee78e-f3dc-458b-97ed-271d44114514.tmp
                                            • Size 13B
                                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            opera-one.jpg
                                            • Path C:\Windows\SystemTemp\scoped_dir7124_1217848637\opera-one.jpg
                                            • Size 194KB
                                            • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            persona.ini
                                            • Path C:\Windows\SystemTemp\scoped_dir7124_1217848637\persona.ini
                                            • Size 207B
                                            • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            opera-one-dark.jpg
                                            • Path C:\Windows\SystemTemp\scoped_dir7124_1896402351\opera-one-dark.jpg
                                            • Size 349KB
                                            • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            persona.ini
                                            • Path C:\Windows\SystemTemp\scoped_dir7124_1896402351\persona.ini
                                            • Size 217B
                                            • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            memory/3216-610-0x00007FFF4ED50000-0x00007FFF4ED51000-memory.dmp
                                            Download

                                            memory/3216-615-0x00007FFF4F3C0000-0x00007FFF4F3C1000-memory.dmp
                                            Download