Overview

overview

8

Static

static

8

OperaInstaller.exe

windows10-2004-x64

8

OperaInstaller.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    150s
  • max time network
    142s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    22/10/2026, 22:43

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaInstaller.exe
  • Size 178KB
  • Sample261022-2nd9yaf141
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealer

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Writes a Windows system DLL name to a user directory 2 TTPs 2 IoCs

    A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

    defense_evasion
  • Adds Run key to start application 2 TTPs 3 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 14 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 18 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 11 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 5 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 49 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe"
    1⤵
    • Downloads MZ/PE file
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3152
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:3380
      • C:\Users\Admin\AppData\Local\Temp\7zS43DADD29\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS43DADD29\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
        3⤵
        • Downloads MZ/PE file
        • Executes dropped EXE
        • Enumerates connected drives
        • Reads the TCP/IP host and domain name from the registry
        • Suspicious use of WriteProcessMemory
        PID:1204
        • C:\Users\Admin\AppData\Local\Temp\7zS43DADD29\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS43DADD29\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff624a8d2d8,0x7ff624a8d2e8,0x7ff624a8d2f8
          4⤵
          • Executes dropped EXE
          PID:3520
        • C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:4960
        • C:\Users\Admin\AppData\Local\Temp\7zS43DADD29\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zS43DADD29\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=1204 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\opera_package_20261022234341" --session-guid=74886ea2-74de-4a19-a1da-754f04ef6070 --server-tracking-blob="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 " --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=0809000000000000
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Suspicious use of WriteProcessMemory
          PID:2596
          • C:\Users\Admin\AppData\Local\Temp\7zS43DADD29\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zS43DADD29\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x2a4,0x2a8,0x2b8,0x280,0x2bc,0x7ff624a8d2d8,0x7ff624a8d2e8,0x7ff624a8d2f8
            5⤵
            • Executes dropped EXE
            PID:5732
          • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\installer.exe" --backend --initial-pid=1204 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\opera_package_202610222343411" --session-guid=74886ea2-74de-4a19-a1da-754f04ef6070 --server-tracking-blob="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 " --silent --desktopshortcut=1 --install-subfolder=138.0.6044.24
            5⤵
            • Executes dropped EXE
            • Enumerates connected drives
            • Modifies registry class
            • Suspicious use of WriteProcessMemory
            PID:6068
            • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff64f32d2d8,0x7ff64f32d2e8,0x7ff64f32d2f8
              6⤵
              • Executes dropped EXE
              PID:1744
            • C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\opera_package_202610222343411\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\opera_package_202610222343411\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Writes a Windows system DLL name to a user directory
              • Adds Run key to start application
              • System Location Discovery: System Language Discovery
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:1320
              • C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\opera_package_202610222343411\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\opera_package_202610222343411\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x22c,0x258,0x8ac9cc,0x8ac9d8,0x8ac9e4
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:2772
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Enumerates system info in registry
                • Suspicious use of WriteProcessMemory
                PID:3540
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x10cc9cc,0x10cc9d8,0x10cc9e4
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:2644
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Reads the TCP/IP host and domain name from the registry
                  • System Location Discovery: System Language Discovery
                  • Enumerates system info in registry
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:4104
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:5752
                    • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ff887e768a0,0x7ff887e768b0,0x7ff887e768c0
                      10⤵
                      • Executes dropped EXE
                      PID:3552
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:5256
                    • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x284,0x288,0x28c,0x280,0x290,0x7ff887e768a0,0x7ff887e768b0,0x7ff887e768c0
                      10⤵
                      • Executes dropped EXE
                      PID:2128
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2c0,0x2c4,0x2c8,0x29c,0x2cc,0xa97324,0xa97330,0xa9733c
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:4484
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:4752
                      • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x284,0x288,0x28c,0x280,0x290,0x7ff887e768a0,0x7ff887e768b0,0x7ff887e768c0
                        11⤵
                        • Executes dropped EXE
                        PID:2876
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:944
                      • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ff887e768a0,0x7ff887e768b0,0x7ff887e768c0
                        11⤵
                        • Executes dropped EXE
                        PID:2120
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:1400
                      • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ff887e768a0,0x7ff887e768b0,0x7ff887e768c0
                        11⤵
                        • Executes dropped EXE
                        PID:2144
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\opera_package_202610222343411\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:1912
              • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ff887e768a0,0x7ff887e768b0,0x7ff887e768c0
                7⤵
                • Executes dropped EXE
                PID:2568
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1944,i,1948913495820777813,18400559944063996059,524288 --field-trial-handle=2160,i,9469885685615313672,12571188017699688603,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2164,i,11207921470320577763,7682815361716006895,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2308 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                • Enumerates system info in registry
                PID:2004
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --gpu-recent-crash-count=0 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1724,i,11664844771340290977,17952013626670071893,262144 --field-trial-handle=2160,i,9469885685615313672,12571188017699688603,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2164,i,11207921470320577763,7682815361716006895,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2156 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:2248
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2596,i,6651641915825783981,10419298214982127008,524288 --field-trial-handle=2160,i,9469885685615313672,12571188017699688603,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2164,i,11207921470320577763,7682815361716006895,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2612 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4312
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3920,i,7087095925152495839,13338379107501666717,1572864 --field-trial-handle=2160,i,9469885685615313672,12571188017699688603,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2164,i,11207921470320577763,7682815361716006895,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=4040 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5644
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3996,i,287796120069662323,16911931181774533662,524288 --field-trial-handle=2160,i,9469885685615313672,12571188017699688603,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2164,i,11207921470320577763,7682815361716006895,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4060 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5896
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4336,i,3299379391866730241,9194070949943677195,1572864 --field-trial-handle=2160,i,9469885685615313672,12571188017699688603,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2164,i,11207921470320577763,7682815361716006895,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4392 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:1940
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4756,i,17033553813649342890,17552621555890049958,524288 --field-trial-handle=2160,i,9469885685615313672,12571188017699688603,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2164,i,11207921470320577763,7682815361716006895,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4744 /prefetch:12
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:3324
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3944,i,4004582782355018188,17940763399938892754,524288 --field-trial-handle=2160,i,9469885685615313672,12571188017699688603,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2164,i,11207921470320577763,7682815361716006895,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4928 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:3748
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5164,i,16961367993054317581,15102436119692621779,524288 --field-trial-handle=2160,i,9469885685615313672,12571188017699688603,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2164,i,11207921470320577763,7682815361716006895,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5168 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:4864
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:7032
              • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ff887e768a0,0x7ff887e768b0,0x7ff887e768c0
                7⤵
                • Executes dropped EXE
                PID:6472
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --gpu-recent-crash-count=0 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1704,i,9404217766833751911,261369621682139085,262144 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1928 /prefetch:2
                7⤵
                • Executes dropped EXE
                PID:5948
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2064,i,3444612828246018192,10212397952580458974,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2144 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                • Enumerates system info in registry
                PID:2956
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2544,i,8824673797559647848,18444314195582195771,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2172 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:3248
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3256,i,14093517157296753738,2249599089493555672,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3344 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4416
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3280,i,16715589150361899546,7647805388477515899,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3384 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6392
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3292,i,7528668516625249709,15332310050920071350,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3404 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6420
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3304,i,17625679720286972457,15319382029473505182,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3424 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5612
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3316,i,9538919001134777494,16449890283220018021,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3444 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6200
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3268,i,5194807495191202451,13675563745060880901,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3364 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6180
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3328,i,12111654387230533094,4152352550849381518,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3464 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:5924
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3888,i,4702313390003075627,5238571683266889611,1572864 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3908 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:2372
              • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_gx_splash.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                7⤵
                • Executes dropped EXE
                • Modifies registry class
                • Suspicious use of AdjustPrivilegeToken
                PID:6728
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4804,i,6924681148075057524,11489132830675326687,1572864 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4808 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7072
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4968,i,15264941060814135674,853807326729928478,1572864 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4976 /prefetch:1
                7⤵
                • Executes dropped EXE
                PID:6800
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5248,i,2878413328062691364,13026063414162370886,1572864 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5264 /prefetch:1
                7⤵
                • Executes dropped EXE
                PID:6932
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5272,i,3408137749624579764,7028415546121800145,1572864 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5456 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6936
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5996,i,3320610889204454772,4323302246385783648,1572864 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6468 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6996
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6844,i,8998287703567475757,16842922866400019314,1572864 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6984 /prefetch:9
                7⤵
                • Executes dropped EXE
                PID:4472
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6916,i,13221149967139343953,15921242528893225488,1572864 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=7004 /prefetch:9
                7⤵
                • Executes dropped EXE
                PID:752
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6920,i,3653670704247539199,9952739901763417790,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=7332 /prefetch:12
                7⤵
                • Executes dropped EXE
                PID:6944
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2564,i,17558101855255645146,7325324252305463559,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7336 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:6888
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7372,i,6107183888946168903,1918832132304368429,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7384 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6976
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7396,i,8664287255532807432,7028776019852351669,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7612 /prefetch:14
                7⤵
                • Enumerates system info in registry
                PID:1128
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7620,i,9073528128067165737,1987123734708681860,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7660 /prefetch:14
                7⤵
                • Enumerates system info in registry
                PID:4860
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7280,i,16750122555028548346,287771188160712255,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7684 /prefetch:14
                7⤵
                • Enumerates system info in registry
                PID:3356
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7892,i,3119113368061774415,416006675635515857,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7912 /prefetch:14
                7⤵
                • Enumerates system info in registry
                PID:1864
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8148,i,17863338821444655471,10330610029686402329,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8160 /prefetch:14
                7⤵
                  PID:4108
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8196,i,433982664080138848,4786263477464016199,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8212 /prefetch:14
                  7⤵
                  • Enumerates system info in registry
                  PID:6968
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8472,i,2817709976986825937,17146552096470923941,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8504 /prefetch:14
                  7⤵
                  • Enumerates system info in registry
                  PID:6440
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8240,i,13003753313346977694,13896244331492605034,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8484 /prefetch:14
                  7⤵
                    PID:6256
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8720,i,1228140568578012999,11208905178098748354,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8536 /prefetch:14
                    7⤵
                      PID:6780
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8732,i,15216939377495858700,8355216265118329468,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8776 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:6136
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8716,i,5231168479483469759,17296044936820884530,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8820 /prefetch:14
                      7⤵
                        PID:6656
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8744,i,14507729065965534514,12795401251376916598,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8800 /prefetch:14
                        7⤵
                        • Enumerates system info in registry
                        PID:4864
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9272,i,16050249803753278185,2103902133661830724,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9280 /prefetch:14
                        7⤵
                        • Enumerates system info in registry
                        PID:6028
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9408,i,12800637418495189437,16613568155931049448,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9420 /prefetch:14
                        7⤵
                        • Enumerates system info in registry
                        PID:3748
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9580,i,8000842709749686955,9799502628024544629,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9592 /prefetch:14
                        7⤵
                          PID:6388
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9604,i,13323398317002465463,17000461813092410549,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9700 /prefetch:14
                          7⤵
                          • Enumerates system info in registry
                          PID:7148
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9840,i,3445194272996891575,10500685898535482778,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9812 /prefetch:14
                          7⤵
                            PID:920
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9808,i,11952524469415669719,12093694445570800200,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9964 /prefetch:14
                            7⤵
                            • Enumerates system info in registry
                            PID:6820
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10112,i,11042208109927170781,4473239037676413139,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10120 /prefetch:14
                            7⤵
                            • Enumerates system info in registry
                            PID:6956
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10256,i,4199885066285300758,9888741425169387455,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10264 /prefetch:14
                            7⤵
                            • Enumerates system info in registry
                            PID:4372
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10400,i,14830061610397436690,7448530615344861454,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10408 /prefetch:14
                            7⤵
                            • Enumerates system info in registry
                            PID:756
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10536,i,13213259283528558585,5093027134344461746,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=10548 /prefetch:14
                            7⤵
                              PID:2756
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=10692,i,5584007366469355865,4008456524971214831,1572864 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=10752 /prefetch:1
                              7⤵
                                PID:4464
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11016,i,14246052443832825703,14058345600178017114,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11028 /prefetch:14
                                7⤵
                                • Enumerates system info in registry
                                PID:1476
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11128,i,18138789753644549071,190541630501616777,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=11132 /prefetch:14
                                7⤵
                                • Enumerates system info in registry
                                PID:3608
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=11596,i,12039132195243566040,18187199209538959629,1572864 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=11608 /prefetch:9
                                7⤵
                                • Enumerates system info in registry
                                PID:7576
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11648,i,1182612080675152091,5282240684367727715,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=11660 /prefetch:14
                                7⤵
                                  PID:7584
                                • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                  7⤵
                                  • Reads the TCP/IP host and domain name from the registry
                                  PID:8712
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                    C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x2a4,0x2a8,0x2ac,0x280,0x2b0,0x7ff704033df8,0x7ff704033e08,0x7ff704033e18
                                    8⤵
                                      PID:9176
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6988,i,7850686584763946304,6947809364243667145,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=11984 /prefetch:14
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:8864
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=12016,i,1141774841093799582,26269728402648767,1572864 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=11956 /prefetch:1
                                    7⤵
                                      PID:9164
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12432,i,7115408506222157621,8913011435805164871,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=12444 /prefetch:14
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:3344
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12584,i,6575319323710110516,1636503261463778992,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=12596 /prefetch:14
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:4820
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12128,i,7641224968472654170,9216860281124727090,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=3676 /prefetch:14
                                      7⤵
                                        PID:8388
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6736,i,4247393067590154026,1567495246155121083,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=3976 /prefetch:14
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:8504
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3984,i,15505225946098170541,10090446809571988231,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=5700 /prefetch:14
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:8592
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12384,i,4849202527600110283,902284568715747204,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=4116 /prefetch:14
                                        7⤵
                                          PID:5280
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4156,i,10540215011158566204,5513562520828232987,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=4180 /prefetch:14
                                          7⤵
                                            PID:7588
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5732,i,8309283107380974539,9669313484268883930,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=4132 /prefetch:14
                                            7⤵
                                              PID:8852
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=3720,i,17819221517499813775,4276444915157385410,1572864 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=3320 /prefetch:9
                                              7⤵
                                                PID:8896
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3700,i,7312579824462371163,10216519122984217365,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=3712 /prefetch:14
                                                7⤵
                                                • Enumerates system info in registry
                                                PID:8900
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8224,i,8642546585931485481,3327964895463194600,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=11920 /prefetch:14
                                                7⤵
                                                • Enumerates system info in registry
                                                PID:8988
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8524,i,4926924004238671947,6076498569322974311,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=3372 /prefetch:14
                                                7⤵
                                                  PID:2540
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3780,i,7902818061758226646,17164371606041761357,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=8560 /prefetch:14
                                                  7⤵
                                                  • Enumerates system info in registry
                                                  PID:4300
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3808,i,7874249239295970283,5216645891687522055,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=8548 /prefetch:14
                                                  7⤵
                                                  • Enumerates system info in registry
                                                  PID:6760
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12388,i,15273444209116076947,7976371643353647333,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=8608 /prefetch:14
                                                  7⤵
                                                  • Enumerates system info in registry
                                                  PID:7672
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12612,i,9364250451556815467,10584120006021695517,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=3516 /prefetch:14
                                                  7⤵
                                                    PID:4992
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=4140,i,4701518473522575633,11562642455940866351,1572864 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=12716 /prefetch:9
                                                    7⤵
                                                      PID:8676
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=3304,i,15499627952416181749,12036624137311452118,1572864 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=8624 /prefetch:9
                                                      7⤵
                                                        PID:5504
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=12128,i,6914991283789230476,13146808276983873101,1572864 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=5632 /prefetch:9
                                                        7⤵
                                                          PID:5632
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=3280,i,4952049197876254326,12241181040130227013,1572864 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=4140 /prefetch:9
                                                          7⤵
                                                          • Enumerates system info in registry
                                                          PID:8920
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3292,i,8392189361929805634,4555666166091758493,524288 --field-trial-handle=1932,i,16674984989304573826,15518452406800017088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1956,i,13460090613777341285,9602069538295238606,4 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=3296 /prefetch:14
                                                          7⤵
                                                            PID:5276
                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\opera_package_202610222343411\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe
                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\opera_package_202610222343411\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe"
                                                      4⤵
                                                      • Executes dropped EXE
                                                      • Writes a Windows system DLL name to a user directory
                                                      • System Location Discovery: System Language Discovery
                                                      PID:5020
                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\opera_package_202610222343411\assistant\assistant_installer.exe
                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\opera_package_202610222343411\assistant\assistant_installer.exe" --version
                                                      4⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • System Location Discovery: System Language Discovery
                                                      • Suspicious use of WriteProcessMemory
                                                      PID:5292
                                                      • C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\opera_package_202610222343411\assistant\assistant_installer.exe
                                                        "C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\opera_package_202610222343411\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x8ac9cc,0x8ac9d8,0x8ac9e4
                                                        5⤵
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        • System Location Discovery: System Language Discovery
                                                        PID:796
                                              • C:\Windows\system32\svchost.exe
                                                C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                1⤵
                                                  PID:5812
                                                • C:\Windows\system32\wbem\unsecapp.exe
                                                  C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                  1⤵
                                                    PID:2352
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                                    1⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    • Suspicious use of WriteProcessMemory
                                                    PID:4140
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                                                      C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ff887e768a0,0x7ff887e768b0,0x7ff887e768c0
                                                      2⤵
                                                      • Executes dropped EXE
                                                      PID:2732
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                    1⤵
                                                    • Reads the TCP/IP host and domain name from the registry
                                                    • Enumerates system info in registry
                                                    PID:8704
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                      C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff704033df8,0x7ff704033e08,0x7ff704033e18
                                                      2⤵
                                                        PID:5744
                                                      • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                        "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                        2⤵
                                                          PID:8816

                                                      Network

                                                            MITRE ATT&CK Enterprise v16

                                                            Reconnaissance

                                                            Resource Development

                                                            Initial Access

                                                            Execution

                                                            Persistence

                                                            Boot or Logon Autostart Execution

                                                            1
                                                            T1547

                                                            Registry Run Keys / Startup Folder

                                                            1
                                                            T1547.001

                                                            Event Triggered Execution

                                                            1
                                                            T1546

                                                            Component Object Model Hijacking

                                                            1
                                                            T1546.015

                                                            Hijack Execution Flow

                                                            1
                                                            T1574

                                                            DLL Search Order Hijacking

                                                            1
                                                            T1574.001

                                                            Privilege Escalation

                                                            Boot or Logon Autostart Execution

                                                            1
                                                            T1547

                                                            Registry Run Keys / Startup Folder

                                                            1
                                                            T1547.001

                                                            Event Triggered Execution

                                                            1
                                                            T1546

                                                            Component Object Model Hijacking

                                                            1
                                                            T1546.015

                                                            Hijack Execution Flow

                                                            1
                                                            T1574

                                                            DLL Search Order Hijacking

                                                            1
                                                            T1574.001

                                                            Defense Evasion

                                                            Hijack Execution Flow

                                                            1
                                                            T1574

                                                            DLL Search Order Hijacking

                                                            1
                                                            T1574.001

                                                            Masquerading

                                                            1
                                                            T1036

                                                            Match Legitimate Name or Location

                                                            1
                                                            T1036.005

                                                            Modify Registry

                                                            2
                                                            T1112

                                                            Credential Access

                                                            Credentials from Password Stores

                                                            1
                                                            T1555

                                                            Credentials from Web Browsers

                                                            1
                                                            T1555.003

                                                            Unsecured Credentials

                                                            1
                                                            T1552

                                                            Credentials In Files

                                                            1
                                                            T1552.001

                                                            Discovery

                                                            Peripheral Device Discovery

                                                            1
                                                            T1120

                                                            Query Registry

                                                            5
                                                            T1012

                                                            System Information Discovery

                                                            4
                                                            T1082

                                                            System Location Discovery

                                                            1
                                                            T1614

                                                            System Language Discovery

                                                            1
                                                            T1614.001

                                                            System Network Configuration Discovery

                                                            1
                                                            T1016

                                                            System Time Discovery

                                                            1
                                                            T1124

                                                            Lateral Movement

                                                            Collection

                                                            Data from Local System

                                                            1
                                                            T1005

                                                            Command and Control

                                                            Exfiltration

                                                            Impact

                                                            Replay Monitor

                                                            Loading Replay Monitor...

                                                            Downloads

                                                            E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                            • Size 471B
                                                            • SHA256 fa0e95b9601e1707461c2768b5541fc25492a4b3d95596bc1cceb41627382a0b
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                            • Size 416B
                                                            • SHA256 f084f920f6ce84e0d1cdf3a174e71f45e356f7d80894e2c33c18609a543ed210
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            snapshot-new.baf
                                                            • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\No_Vary_Search\snapshot-new.baf
                                                            • Size 20B
                                                            • SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
                                                            • MD5 SHA1 SHA512
                                                            Submit Download

                                                            data_1
                                                            • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_1
                                                            • Size 264KB
                                                            • SHA256 acd3b7324a5b6cfb3963e7fb04b4507b26445830d6a459dcfa06b049d8fcb4a4
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            f_000001
                                                            • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
                                                            • Size 164KB
                                                            • SHA256 a779d6fcf35f2ca1834d268bf26c28d8b92a73e63a03c162cf603b6bd95e2db0
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            138.0.6044.24.manifest
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\138.0.6044.24.manifest
                                                            • Size 225B
                                                            • SHA256 a308596d8f06659398ed38592a261ccd03ec12525ffddc8208120ebe5517abb8
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            150x150Logo.scale-100.png
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-100.png
                                                            • Size 1KB
                                                            • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            150x150Logo.scale-100_contrast-white.png
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-100_contrast-white.png
                                                            • Size 1KB
                                                            • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            150x150Logo.scale-140.png
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-140.png
                                                            • Size 1KB
                                                            • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            150x150Logo.scale-140_contrast-white.png
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-140_contrast-white.png
                                                            • Size 1KB
                                                            • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            150x150Logo.scale-180.png
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-180.png
                                                            • Size 1KB
                                                            • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            150x150Logo.scale-180_contrast-white.png
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-180_contrast-white.png
                                                            • Size 1KB
                                                            • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            150x150Logo.scale-80.png
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-80.png
                                                            • Size 827B
                                                            • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            150x150Logo.scale-80_contrast-white.png
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-80_contrast-white.png
                                                            • Size 799B
                                                            • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            70x70Logo.scale-100.png
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-100.png
                                                            • Size 781B
                                                            • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            70x70Logo.scale-100_contrast-white.png
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-100_contrast-white.png
                                                            • Size 752B
                                                            • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            70x70Logo.scale-140.png
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-140.png
                                                            • Size 991B
                                                            • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            70x70Logo.scale-140_contrast-white.png
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-140_contrast-white.png
                                                            • Size 865B
                                                            • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            70x70Logo.scale-180.png
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-180.png
                                                            • Size 1KB
                                                            • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            70x70Logo.scale-180_contrast-white.png
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-180_contrast-white.png
                                                            • Size 1KB
                                                            • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            70x70Logo.scale-80.png
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-80.png
                                                            • Size 590B
                                                            • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            70x70Logo.scale-80_contrast-white.png
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-80_contrast-white.png
                                                            • Size 519B
                                                            • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            assistant_package
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\assistant_package
                                                            • Size 4.0MB
                                                            • SHA256 d3db6378085b6ce536c560d45b54375807da6bb4be4819e0125e7f54e943c673
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            d3dcompiler_47.dll
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\d3dcompiler_47.dll
                                                            • Size 4.5MB
                                                            • SHA256 3b42e20384e7d1515ec2fd7cfe82bb5f03cee0b9fab4cf39e912a56f39002c37
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            dxcompiler.dll
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\dxcompiler.dll
                                                            • Size 24.7MB
                                                            • SHA256 bdeca837a59d75f6d02b723ed9167a1359fa74fca0fd44a7e0982ea5f7ee8e61
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            dxil.dll
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\dxil.dll
                                                            • Size 1.4MB
                                                            • SHA256 ea56c20ead54660c7dfd844559de48708bc937c9283ef4fa3f33af871d02d734
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            files_list
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\files_list
                                                            • Size 6KB
                                                            • SHA256 a5bbae7f7160a98772a9d713ae501add9db6b80015bf11302d133c0052020290
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            headless_command_resources.pak
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\headless_command_resources.pak
                                                            • Size 3KB
                                                            • SHA256 7c71d88913a88c6d0006b684055f3d136782aa1f6866ecafe2096b8aeae2e418
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            icudtl.dat
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\icudtl.dat
                                                            • Size 10.4MB
                                                            • SHA256 113f7464a507af4f7d2b0ea73094217881386f19dac7cacc5f071e7a4cf04a20
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            installer.exe
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\installer.exe
                                                            • Size 8.4MB
                                                            • SHA256 df8f4c8801bbdfc47af42be6dc6cd649188cabb99b3b5b3a232a9eb3381d93fb
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            installer_helper_64.exe
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\installer_helper_64.exe
                                                            • Size 607KB
                                                            • SHA256 e3f94b159bd44a4272f46df048a368d949ef9e756e150c9213ef63763b9a2378
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            libEGL.dll
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\libEGL.dll
                                                            • Size 451KB
                                                            • SHA256 2f63ea3de4ad9e06b3cf6e5e9b2cc271f3ac52720c85ae8848bf55a8403e4743
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            libGLESv2.dll
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\libGLESv2.dll
                                                            • Size 451KB
                                                            • SHA256 3e7106cea7a667ec547a53e589e3a4558cc2e9f03ab3e4bee3e1712600fbf669
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            bg.pak
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\bg.pak
                                                            • Size 983KB
                                                            • SHA256 1dc471ddd2101d87e4e24882bdf678b255e6973fbc7d86f1bedf4ff2646fa503
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            bn.pak
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\bn.pak
                                                            • Size 1.2MB
                                                            • SHA256 0adbfc8c0aea9d072c502d6801a29829e62028f31595b7bd134e949e6825d72c
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            ca.pak
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\ca.pak
                                                            • Size 619KB
                                                            • SHA256 3f2e81140887b4c92ab2cacb287f1395364fcb698d9eb50e54f25f9137e6c8e2
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            cs.pak
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\cs.pak
                                                            • Size 620KB
                                                            • SHA256 0483fae37cde542b5011e5d26b1ca57f69f37ce9fa44ecd28a8e8e670ab0f712
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            da.pak
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\da.pak
                                                            • Size 569KB
                                                            • SHA256 1e68cd9d9988aefe17576f3c83f1543fa1ffcb972b22dfb1de1dcb2ab23ff423
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            de.pak
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\de.pak
                                                            • Size 617KB
                                                            • SHA256 a400a05615fc1c964b0f9c63de7c2321a03e919be7c7b22c61f545837b9ac756
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            el.pak
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\el.pak
                                                            • Size 1.0MB
                                                            • SHA256 5fc93d324372cf060857cf4a29bf31f689572914c92b24a8174a89a2c538115b
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            en-GB.pak
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\en-GB.pak
                                                            • Size 499KB
                                                            • SHA256 4c0eeb545466af9307b50c3cd8331532413f31b7bf7a359a9a6d31a6513ddc10
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            en-US.pak
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\en-US.pak
                                                            • Size 503KB
                                                            • SHA256 31d0d2140d3664754021877248cccf2ef54e4cd41bf8d98d00124e0111801142
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            installer_prefs.json6c90e7b0-2780-48d2-b711-d2ba33caaaed.tmp
                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json6c90e7b0-2780-48d2-b711-d2ba33caaaed.tmp
                                                            • Size 1KB
                                                            • SHA256 50a7697c3c2ae31253efd809d83ca091a10c4d776158efe2432bf3d3ca5e0ae1
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            Opera Browser.lnk
                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\opera_package_202610222343411\Opera Browser.lnk
                                                            • Size 1KB
                                                            • SHA256 d73a63a31cb38f032f30b9f38529bc093d8541adacdba057f29eae2c6fb69764
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            additional_file0.tmp
                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\opera_package_202610222343411\additional_file0.tmp
                                                            • Size 2.9MB
                                                            • SHA256 30786977e61add36f7c641facfb7fce1b2ec7c2a0a7e055a172f127a68788556
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            assistant_installer.exe
                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\opera_package_202610222343411\assistant\assistant_installer.exe
                                                            • Size 2.4MB
                                                            • SHA256 e8dce277d6edb918499526fadba9902e317496c2af077219f263a7a643467824
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            dbgcore.DLL
                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\opera_package_202610222343411\assistant\dbgcore.DLL
                                                            • Size 196KB
                                                            • SHA256 c16220edd3787da33dbd3ac2fcbec7de6a13e2baf14ae6105bba68d4efd83628
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            dbghelp.dll
                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\opera_package_202610222343411\assistant\dbghelp.dll
                                                            • Size 1.8MB
                                                            • SHA256 990b13e88b4a9985eb5c596078e2ec26a0edcc22169dd71f8a84c7943005306c
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\opera_package_202610222343411\de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                            • Size 3.5MB
                                                            • SHA256 9d645b0ce032688d4f3100cd1f1d178d3c2c9d04bb691144659b98b4931d8eef
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            installer_prefs_include.json
                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\opera_package_202610222343411\installer_prefs_include.json
                                                            • Size 228B
                                                            • SHA256 fb510f9f3decb14b00aa8a87149dbbdd4286ee684cce0fab0c996d15aa67d4a6
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            installer_prefs_include.json67f499b6-e712-4742-9003-81d62818aed7.tmp
                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\opera_package_202610222343411\installer_prefs_include.json67f499b6-e712-4742-9003-81d62818aed7.tmp
                                                            • Size 1KB
                                                            • SHA256 e3fff2c796b8f2889a96695f6df9b2779645e7b0163c0b98a30f7c54bd7e6836
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            installer_prefs_include.jsona0fc27c7-12c4-4323-b87a-dba2be5f077b.tmp
                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\ea4bb476-433d-4645-bfe2-3297780511a4 Opera Installer Temp\opera_package_202610222343411\installer_prefs_include.jsona0fc27c7-12c4-4323-b87a-dba2be5f077b.tmp
                                                            • Size 243B
                                                            • SHA256 bb34cce4e4c695d363965ea84f9ddc9cb30ce8ee95bcef6140f159be43969430
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            1230e094-0dd4-4bd8-91eb-e20ec3076800.tmp
                                                            • Path C:\Users\Admin\AppData\Local\Temp\1230e094-0dd4-4bd8-91eb-e20ec3076800.tmp
                                                            • Size 3.0MB
                                                            • SHA256 5c8953fdd4f8a848a8711f749b4bf85376836da9a065b7bdd887e5d03f44cfd8
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            5a5129d9-46c4-4d91-b082-dfaada494fec.tmp
                                                            • Path C:\Users\Admin\AppData\Local\Temp\5a5129d9-46c4-4d91-b082-dfaada494fec.tmp
                                                            • Size 14KB
                                                            • SHA256 99dfb50b062db90ac585e2a877192973b88522ceb257a78345f1f1ca5da98e1b
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            installer.exe
                                                            • Path C:\Users\Admin\AppData\Local\Temp\7zS43DADD29\installer.exe
                                                            • Size 8.4MB
                                                            • SHA256 69ba0516f53a270d75435b2dcb059a77ea2e0dec2eaacff7c227c88efb694750
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            OpInst.exe
                                                            • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                                            • Size 3.1MB
                                                            • SHA256 16ec1a25de6515f5399e5e815e8e6efcf9e5bbbc669b25a828712e97366aff8c
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            bg.png
                                                            • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                                            • Size 224KB
                                                            • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            favicon_opera_one.png
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1912_632031407\CRX_INSTALL\favicon_opera_one.png
                                                            • Size 2KB
                                                            • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            manifest.json
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1912_632031407\CRX_INSTALL\manifest.json
                                                            • Size 3KB
                                                            • SHA256 04dbe0c15af570ccff856c4bb005419e343ba39092eaeda1116b91a8e5961523
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            reader_mode.js
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1912_632031407\CRX_INSTALL\reader_mode.js
                                                            • Size 112KB
                                                            • SHA256 ebb002d9d7d9206bc39d3f44bae6e49b7d694a172a0b1da9934f49c17f433084
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            service_worker.js
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1912_632031407\CRX_INSTALL\service_worker.js
                                                            • Size 1.1MB
                                                            • SHA256 055406577738ff3eac762b7d2e7360bac21acf0bb688d829d0acfb9126993de2
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            spotify_frame_interceptor.js
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1912_632031407\CRX_INSTALL\spotify_frame_interceptor.js
                                                            • Size 5KB
                                                            • SHA256 f25cc540e5212f9f327bfb16702e156d385aa2545bd1b4c572f6a5543d4e7930
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            logo_128.png
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_1051069428\CRX_INSTALL\public\icons\logo_128.png
                                                            • Size 7KB
                                                            • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            logo_16.png
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_1051069428\CRX_INSTALL\public\icons\logo_16.png
                                                            • Size 653B
                                                            • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            logo_32.png
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_1051069428\CRX_INSTALL\public\icons\logo_32.png
                                                            • Size 1KB
                                                            • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            logo_48.png
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_1051069428\CRX_INSTALL\public\icons\logo_48.png
                                                            • Size 2KB
                                                            • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            logo_64.png
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_1051069428\CRX_INSTALL\public\icons\logo_64.png
                                                            • Size 2KB
                                                            • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            Icon_Light_Neutral.png
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_1861987987\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                            • Size 2KB
                                                            • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            Icon_Light_Neutral.png
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_1861987987\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
                                                            • Size 962B
                                                            • SHA256 e8adb8a9dcca121a1853749ebef122b84a995ebf8775cd27b0dd54bab9840bd1
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            messages.json
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_488891393\CRX_INSTALL\_locales\de\messages.json
                                                            • Size 395B
                                                            • SHA256 7f068365742c910bd20d60741e89473e3b422ca92776fcfe7db1529bdfcb3efa
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            messages.json
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_488891393\CRX_INSTALL\_locales\en\messages.json
                                                            • Size 396B
                                                            • SHA256 1bcb4888a65788a50ed88f4bd95955d1dafdc950b5ef4609b37f42934a4bf3b9
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            messages.json
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_488891393\CRX_INSTALL\_locales\es\messages.json
                                                            • Size 398B
                                                            • SHA256 d2c36a6b4b6535152df5adba5c9d85c45ea6898a1b170a4f795c228931cacc5b
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            messages.json
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_488891393\CRX_INSTALL\_locales\pl\messages.json
                                                            • Size 401B
                                                            • SHA256 c6e32b74d1b21921946f59b9a12cc7b24086e876608d3db3f29628c35b35dbee
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            messages.json
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_488891393\CRX_INSTALL\_locales\ru\messages.json
                                                            • Size 463B
                                                            • SHA256 5f08e78f50623ca8140af8d02eb7fd7e56ff8e9538e4449f7ee327a7b2ef292d
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            messages.json
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_488891393\CRX_INSTALL\_locales\uk\messages.json
                                                            • Size 410B
                                                            • SHA256 95ef7c34001a60c39cc5fb3516081ff901bb65a08db6ed00acd70afb48858675
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            background.js
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_488891393\CRX_INSTALL\background.js
                                                            • Size 105KB
                                                            • SHA256 9a9b0f7b3070d6f47773e487ebf53134c7629c15c4564ca613c3c9a8077b543d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            content.js.LICENSE.txt
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_488891393\CRX_INSTALL\content.js.LICENSE.txt
                                                            • Size 1KB
                                                            • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            Icon_Light_Active.png
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_488891393\CRX_INSTALL\icons\128\Icon_Light_Active.png
                                                            • Size 2KB
                                                            • SHA256 97d9553a4f725354a6d5c3eff11f31285fd89c3b150593f04785b83d0a56efc2
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            Icon_Light_Available_Red.png
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_488891393\CRX_INSTALL\icons\128\Icon_Light_Available_Red.png
                                                            • Size 2KB
                                                            • SHA256 9eccebdbdb61efc0cbd8bccf3a5fedc6f9a1ebe5084b160783f90a56cd1efa7b
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            Icon_Light_Available_Yellow.png
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_488891393\CRX_INSTALL\icons\128\Icon_Light_Available_Yellow.png
                                                            • Size 2KB
                                                            • SHA256 c165ef60bf3806cd0a7121a8d6cfd06909fc84b38a07d43e809bd7bff564099c
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            Icon_Light_Active.png
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_488891393\CRX_INSTALL\icons\32\Icon_Light_Active.png
                                                            • Size 883B
                                                            • SHA256 50aa1dcfa9083b57dd6187752b2c149294210be12d263b793d27daf8d431954c
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            Icon_Light_Available_Red.png
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_488891393\CRX_INSTALL\icons\32\Icon_Light_Available_Red.png
                                                            • Size 895B
                                                            • SHA256 2278e95b28851ade57217ab5c7b32598c44e1085693a3e26379643d29fa0a6d1
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            Icon_Light_Available_Yellow.png
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_488891393\CRX_INSTALL\icons\32\Icon_Light_Available_Yellow.png
                                                            • Size 895B
                                                            • SHA256 726a50a9c008449ab7bafbf21325bfc72093b7ae6a56c5be90cf8c32a8a44641
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            index.html
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_488891393\CRX_INSTALL\index.html
                                                            • Size 222B
                                                            • SHA256 fd21c7ca4637b0221250a14b9fcfb6ebc3b734e659ad80151be4bc579db818f1
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            manifest.json
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_488891393\CRX_INSTALL\manifest.json
                                                            • Size 1KB
                                                            • SHA256 28fe81416b71c3f1f2ccd27abf21410d83a18b3845f2c31c45c6d21c0e8bf583
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            rules.json
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_488891393\CRX_INSTALL\rules.json
                                                            • Size 839B
                                                            • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            manifest.json
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_605481373\CRX_INSTALL\manifest.json
                                                            • Size 1KB
                                                            • SHA256 a2829f3f71f076f86b10bf610d9d35c45d8b653ab501c9cc5d7fe4634cbf4f9a
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            manifest.json
                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7032_605481373\CRX_INSTALL\manifest.json
                                                            • Size 1KB
                                                            • SHA256 8b3312d3adb43c2f1b3e88d0941c8c0edbf038f9056a734f8b1495a1b1d1a51a
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            settings.dat
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                            • Size 40B
                                                            • SHA256 59d567d372038c17d0d080842eca3c66e637e9f3a028b384f34fefafe82174cd
                                                            • MD5 SHA1 SHA512
                                                            Submit Download

                                                            BookmarkMergedSurfaceOrdering2d55e216-6a19-46e5-a155-ba4cdbc82011.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarkMergedSurfaceOrdering2d55e216-6a19-46e5-a155-ba4cdbc82011.tmp
                                                            • Size 6B
                                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                            • MD5 SHA1 SHA512
                                                            Submit Download

                                                            Bookmarks7279f9a9-646d-4cc8-836e-5f3b60477fd7.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks7279f9a9-646d-4cc8-836e-5f3b60477fd7.tmp
                                                            • Size 34KB
                                                            • SHA256 9c7f173c9b57134e055d807272d6e8efd230bf9a88c01bce50187fef89d59ee7
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            BookmarksExtrasdc9353a2-8bcb-4408-8f8f-ae7979228eb2.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtrasdc9353a2-8bcb-4408-8f8f-ae7979228eb2.tmp
                                                            • Size 226KB
                                                            • SHA256 3bba8701a9ef2f6d0b707012a5d52515a883c00cec5d1a2ecc2fbc6627dabead
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            temp-index
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
                                                            • Size 336B
                                                            • SHA256 9d19a1dfc9d06121269801e0e6ab16f58cfd36fd58afeee4c990eae7bf94f111
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            temp-index
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
                                                            • Size 1KB
                                                            • SHA256 f45a9f3244f8196d45aa0abe886531a4ca48a4cbb8fd90a543252105930d8dcc
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            the-real-index
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                            • Size 48B
                                                            • SHA256 b03b87adb72b8845e918c9932323b660c5853da91c01811a8766c43cfb027f39
                                                            • MD5 SHA1 SHA512
                                                            Submit Download

                                                            data_0
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_0
                                                            • Size 8KB
                                                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                            • MD5 SHA1 SHA512 SSDEEP
                                                            Submit Download

                                                            data_2
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_2
                                                            • Size 8KB
                                                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                            • MD5 SHA1 SHA512 SSDEEP
                                                            Submit Download

                                                            data_3
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_3
                                                            • Size 8KB
                                                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                            • MD5 SHA1 SHA512 SSDEEP
                                                            Submit Download

                                                            MANIFEST-000001
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
                                                            • Size 41B
                                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                            • MD5 SHA1 SHA512
                                                            Submit Download

                                                            main.js
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.9_0\main.js
                                                            • Size 48KB
                                                            • SHA256 c2d961a8340848930aa0b7141ec03b973639d119756904d35fc8efe1a4cb8ec7
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            computed_hashes.json
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.9_1\_metadata\computed_hashes.json
                                                            • Size 694B
                                                            • SHA256 29feaf265f7d3fc020c7829104680a6a80b31d8fef266fe537d75be6e1bd91dd
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            verified_contents.json
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.9_1\_metadata\verified_contents.json
                                                            • Size 1KB
                                                            • SHA256 2da5576dbe6f83e339e733336ff13c91c01cb3440dcdedda455f554b8e7ddfd3
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            scraping-method-Dq4mm50p.js
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\scraping-method-Dq4mm50p.js
                                                            • Size 6KB
                                                            • SHA256 99c8d4f76ebc9fc6cea115065570a12d41903c93e18c1c6385b5b2e70256eb70
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            service-worker.ts-fle0M1Xd.js
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\service-worker.ts-fle0M1Xd.js
                                                            • Size 13KB
                                                            • SHA256 4ebb6cb9c3f033302d6a8c31329009082bafeab73c39cca179511b5a972ba8f8
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            service-worker-loader.js
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\service-worker-loader.js
                                                            • Size 49B
                                                            • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                            • MD5 SHA1 SHA512
                                                            Submit Download

                                                            messages.json
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\_locales\en\messages.json
                                                            • Size 429B
                                                            • SHA256 c6a7161359e3c4fbc4059b7209c585f9aa2306c08e6c39a3003f4b29f2ceb22d
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            Icon_Light_Neutral.png
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\128\Icon_Light_Neutral.png
                                                            • Size 2KB
                                                            • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            Icon_Light_Neutral.png
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\32\Icon_Light_Neutral.png
                                                            • Size 932B
                                                            • SHA256 b8e92f9e9b9dc82799231b8d1b57091a9d0bcdd9b54615f86e8c4e4e5c9f036b
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            manifest.json
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\manifest.json
                                                            • Size 1KB
                                                            • SHA256 54a218f04a2f504690e6c61ed8ccb7345e128fcadd4fc2b6031966a43bd445f3
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            messages.json
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\_locales\de\messages.json
                                                            • Size 428B
                                                            • SHA256 e32c4c5ba04741c692aba1bc420b8a0f9ebddbec47a095b26626fb4ca299e9fd
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            messages.json
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\_locales\es-mx\messages.json
                                                            • Size 389B
                                                            • SHA256 1a5875ab54054c7428fe3ff69f621d5a563a2a7e0b06c4023d734f916ff80891
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            messages.json
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\_locales\es\messages.json
                                                            • Size 431B
                                                            • SHA256 3efb81c6c075cb9477cde6823496bc4a83f4be1b3365541a76598522987065a3
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            messages.json
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\_locales\pl\messages.json
                                                            • Size 434B
                                                            • SHA256 a9bb777e5888034a9fe2f12c1e1d259f47e2f5f3f3df22e198733825b369b4ea
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            messages.json
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\_locales\pt-br\messages.json
                                                            • Size 389B
                                                            • SHA256 340966feb56d36c6564a964fbf8718c1f771d0abb40a8c3db95402f11e71a4e2
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            messages.json
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\_locales\ru\messages.json
                                                            • Size 496B
                                                            • SHA256 7b548cf699eca1f64491af66d591a3032f1c101b5c9ece9991afd9e0bfbbbb9c
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            messages.json
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\_locales\uk\messages.json
                                                            • Size 443B
                                                            • SHA256 370df5d3f43ebb04a413cb095d49eec44067c7e53c62cc3721fe105b3ba829ca
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            computed_hashes.json
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\_metadata\computed_hashes.json
                                                            • Size 81KB
                                                            • SHA256 1cb68fd2b11be52ddf8da4e36c6a9308ecdaaccd7da78b91986ea31fe1a925eb
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            _ruleset1
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\_metadata\generated_indexed_rulesets\_ruleset1
                                                            • Size 987B
                                                            • SHA256 87e9f607b1b2638272f2d825615e33512be1eb9ca28e257950f071ca55772e26
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            verified_contents.json
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\_metadata\verified_contents.json
                                                            • Size 6KB
                                                            • SHA256 c78e15f31b9111bacda0b129f2941ea4f9bd480c1bfdf08c1cda5db108192777
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            background.js.LICENSE.txt
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\background.js.LICENSE.txt
                                                            • Size 385B
                                                            • SHA256 c61563a5f5ee84a023c9275397e24c8b8a33eb1e52a9edaf7e8c98571c076c59
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            content.js
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\content.js
                                                            • Size 2.1MB
                                                            • SHA256 52d7d36fbb0c25cb80c120f7a904d667fb8056ea4e573a207750f34889ae164c
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            content_getdify.js
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\content_getdify.js
                                                            • Size 19KB
                                                            • SHA256 290496d9ea2806f9439b38d68df86e75221eaede25a16efb305b3e5689077e72
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            content_getdify.js.LICENSE.txt
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\content_getdify.js.LICENSE.txt
                                                            • Size 149B
                                                            • SHA256 cdf963ced7d25a0f98901a547647b4d6e2dbe0197fd78c87a059a87b0e542fe2
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            Icon_Dark_Neutral.png
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\icons\128\Icon_Dark_Neutral.png
                                                            • Size 2KB
                                                            • SHA256 8acb2d44490a29c14bea94c1ca4442c4b89150f8c8bc7af090c32ce136ca4bf1
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            Icon_Dark_Neutral.png
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\icons\32\Icon_Dark_Neutral.png
                                                            • Size 849B
                                                            • SHA256 52dba611cdee4791ac34f18e0e0af3235355c805401e9c598225c16ed8c5536a
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            popup.js
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\popup.js
                                                            • Size 1.8MB
                                                            • SHA256 2d7e206a838287d747523624eb57e4af3ad3f422e71b1c9c7adec33202a89282
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            window.html
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\window.html
                                                            • Size 223B
                                                            • SHA256 48ead89755412349d4d261b8fd347282e52c1cdbffce846fa674d28a58ba3c35
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            window.js
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\window.js
                                                            • Size 2.7MB
                                                            • SHA256 4d42c8930e50268026ccb51a4649413fbe0c672a490755fd828f13959ccd57ac
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            4b83667b-f9a8-4458-806d-c056ee9d332b.tmp03624e6b-ae35-422d-a6ad-72c910b3b341.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\4b83667b-f9a8-4458-806d-c056ee9d332b.tmp03624e6b-ae35-422d-a6ad-72c910b3b341.tmp
                                                            • Size 27KB
                                                            • SHA256 cc95dbf2bf56e0090333afdab1e6cb96d1614f08ba82bd15f2da37913334c491
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            57748aab-4732-4635-bc56-18677bf352f9.tmp32dae73b-fec9-4cc0-8637-55e3de063ade.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\57748aab-4732-4635-bc56-18677bf352f9.tmp32dae73b-fec9-4cc0-8637-55e3de063ade.tmp
                                                            • Size 27KB
                                                            • SHA256 24683ea67b7b390d33c1d607fc44a309989ada5a9fa5fb4ec96a96fda96d44ff
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            9d41d11c-b2ec-4de4-b5e4-c2cd5d6a344c.tmp7dfe8a3b-9b61-4f00-b53d-5753eed717ed.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\9d41d11c-b2ec-4de4-b5e4-c2cd5d6a344c.tmp7dfe8a3b-9b61-4f00-b53d-5753eed717ed.tmp
                                                            • Size 27KB
                                                            • SHA256 81c54325adf7d351dffacbd1fd0eb15655795d84a6c63682d5a8ea95a11f7a20
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            a373f73d-8f80-49bc-83b5-f233b0f4e874.tmp97707519-800e-447f-9b6b-eb297ce12723.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\a373f73d-8f80-49bc-83b5-f233b0f4e874.tmp97707519-800e-447f-9b6b-eb297ce12723.tmp
                                                            • Size 27KB
                                                            • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            b76046e7-b62d-4178-9e25-9b64ed8a36ad.tmp9095712d-cffe-4c95-b48e-d4e7c11ba26a.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\b76046e7-b62d-4178-9e25-9b64ed8a36ad.tmp9095712d-cffe-4c95-b48e-d4e7c11ba26a.tmp
                                                            • Size 27KB
                                                            • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            d706a38d-3785-41d4-bc64-369f0d8dd476.tmpd7d468ee-0f2c-452c-a288-16cb47a27ea7.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\d706a38d-3785-41d4-bc64-369f0d8dd476.tmpd7d468ee-0f2c-452c-a288-16cb47a27ea7.tmp
                                                            • Size 27KB
                                                            • SHA256 b8f0a6164e126d0f70798a96f456487080b5473bee571bb9594600f8a53901c7
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            Network Persistent State6675417e-c6d2-42c7-b299-a5bb4bb1d36b.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State6675417e-c6d2-42c7-b299-a5bb4bb1d36b.tmp
                                                            • Size 111B
                                                            • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            Network Persistent State916c0862-d677-4ea7-aae3-e070450e39b7.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State916c0862-d677-4ea7-aae3-e070450e39b7.tmp
                                                            • Size 965B
                                                            • SHA256 b35f3143739e16860e74c69480bf011799d947038a5ea0d7f7dead7ec2977b3c
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            SCT Auditing Pending Reports
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\SCT Auditing Pending Reports
                                                            • Size 2B
                                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                            • MD5 SHA1 SHA512
                                                            Submit Download

                                                            Preferences
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                            • Size 16KB
                                                            • SHA256 6ba89453af9f50b340d1f6ecbef4c98004595f85643944e41cacb32776bbf622
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            Preferences444d5910-65bc-466c-9f7c-ebcc2ae29d11.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences444d5910-65bc-466c-9f7c-ebcc2ae29d11.tmp
                                                            • Size 15KB
                                                            • SHA256 d814a270db08ef42f6aab1c68e9634b5a1dccf34b634b6ce05ca12148daa0eb1
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            Preferences5fe1fc53-21b1-48a6-924e-11ec227d578e.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences5fe1fc53-21b1-48a6-924e-11ec227d578e.tmp
                                                            • Size 15KB
                                                            • SHA256 e00efc67f8a7d2cc887e4f10d22214bde0b63c8500549c1d6a9c42ce7ee348b2
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            Preferences7c9318e9-4466-408c-9684-b0e8bb154d21.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences7c9318e9-4466-408c-9684-b0e8bb154d21.tmp
                                                            • Size 10KB
                                                            • SHA256 0f1d3e7ec6817d508c16d52ccfe1ae674aa7a5bd22878f7c998fae02f7c25bb1
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            Secure Preferences9cf90ec2-6acd-4ad1-8a6d-3e7f576c8fff.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences9cf90ec2-6acd-4ad1-8a6d-3e7f576c8fff.tmp
                                                            • Size 112KB
                                                            • SHA256 e9794a9c85392ace31bdea16229a9c73c7a112e65a92173c59be19856d62dc3f
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            Secure Preferencesbdf42bfd-cd9e-4f4b-bd73-112cc9afb444.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferencesbdf42bfd-cd9e-4f4b-bd73-112cc9afb444.tmp
                                                            • Size 82KB
                                                            • SHA256 b43fcf5481de4d4b3e099118ae47973f45eeb0f4db8fe026a27f56597e4da46f
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            temp-index
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                            • Size 456B
                                                            • SHA256 21350888bcae73109f6f9bfa3b603570918b4e9f3c7b768c0b9c8dc75a356b83
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            temp-index
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                            • Size 96B
                                                            • SHA256 aa53280dceaaeb13a8ab75ec1f22552573a1b0a0f7b6ff9ec3f31dc00da0503b
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            temp-index
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                            • Size 456B
                                                            • SHA256 bf8367b15db792eef7e0e5577ae0c641a64d2685f4e7c6044755cdc321ec8ab8
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            the-real-index
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                            • Size 72B
                                                            • SHA256 fd61b97007dac3c391615834fbdde084f4c67819497699bf833038b603a07d1c
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            index
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Shared Dictionary\cache\index
                                                            • Size 24B
                                                            • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                            • MD5 SHA1 SHA512
                                                            Submit Download

                                                            CURRENT
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Site Characteristics Database\CURRENT
                                                            • Size 16B
                                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                            • MD5 SHA1 SHA512
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw
                                                            • Size 381B
                                                            • SHA256 582de7bf24113df07b201aff3af41efed3e6be8654fe3882e431c83034c9642d
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw0136dc11-64f0-4dcf-8629-d6dc99f0b038.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw0136dc11-64f0-4dcf-8629-d6dc99f0b038.tmp
                                                            • Size 9KB
                                                            • SHA256 da27196b1890336ed0d9e39942a2f043a4f8c2a1b2ce691f08a1e0e2fcdabf79
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw06171b60-538e-4654-a0bb-17e27a45f048.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw06171b60-538e-4654-a0bb-17e27a45f048.tmp
                                                            • Size 9KB
                                                            • SHA256 e9e3f508966cba703d4b2941775aeb3c9edfb037834cf970a98672aaaa5662d0
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw08e3c73c-2803-4aea-8bf4-7ff6f8624b50.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw08e3c73c-2803-4aea-8bf4-7ff6f8624b50.tmp
                                                            • Size 9KB
                                                            • SHA256 348f89e178eab214dbae6124939c833224f2287c6a8327deba25769be9328a0d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw0fb28fb6-e990-420e-b878-c90f69d79ce7.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw0fb28fb6-e990-420e-b878-c90f69d79ce7.tmp
                                                            • Size 925B
                                                            • SHA256 2c990528a474a254c39f1e2280106925e3d6480cddc6eae23791d27136b4b3d3
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw14ad18c0-18a7-49f5-bc29-90f78252af25.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw14ad18c0-18a7-49f5-bc29-90f78252af25.tmp
                                                            • Size 8KB
                                                            • SHA256 39e0c8538f3e2105c49f4ed975d328be225bf733bc4e1981a00061f687afbb80
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw1511c821-a385-4ddb-8aed-a97d1d3da7cd.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw1511c821-a385-4ddb-8aed-a97d1d3da7cd.tmp
                                                            • Size 9KB
                                                            • SHA256 4bb62d1fb6656ec64dadea8c7bd7157c90c456de3758fda68783b509cdb2975d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw18eaf5c6-7860-4e5d-8548-79c6df963fc1.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw18eaf5c6-7860-4e5d-8548-79c6df963fc1.tmp
                                                            • Size 1KB
                                                            • SHA256 3ac3c7345f4f5441ed8b158374c3225e5fb365b8cb6fb2352c98b0c24ac024f1
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw22a3af84-14ae-4a6e-a651-3671d2100b8f.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw22a3af84-14ae-4a6e-a651-3671d2100b8f.tmp
                                                            • Size 7KB
                                                            • SHA256 9e6f06cc21e4a82ba30cdf6664387d4aaccc95eec73726cdb274ea756fc23e84
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw24d5bb44-58f6-498f-97c7-8ee0c3234564.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw24d5bb44-58f6-498f-97c7-8ee0c3234564.tmp
                                                            • Size 9KB
                                                            • SHA256 e37afc8e1b7faa533c9f72fcc8d712ca241ac3ab69fe9bba8d7911431226a71a
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw2842f7ee-4940-444d-8781-7d424a0a2c8b.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw2842f7ee-4940-444d-8781-7d424a0a2c8b.tmp
                                                            • Size 9KB
                                                            • SHA256 8c61dc148ef5ca9169aa63ce8c170848cad9eb162343d8e6994d73ee452a54d1
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw28521084-665d-47c1-881a-b161abd14279.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw28521084-665d-47c1-881a-b161abd14279.tmp
                                                            • Size 749B
                                                            • SHA256 6f6fd4755f7e14fd9185471bb22a8a63a7110fcd78adfa1ab9254437f48bd968
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw29508ceb-20eb-4ec3-a5d6-02bffbcb0d73.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw29508ceb-20eb-4ec3-a5d6-02bffbcb0d73.tmp
                                                            • Size 8KB
                                                            • SHA256 9520ad0ad5247018d9ec8f9582a250cd514228ded2b988c8ff22fd1da42959e9
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw2ec7aecb-ea45-4c59-a7f8-d9b1218ea6be.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw2ec7aecb-ea45-4c59-a7f8-d9b1218ea6be.tmp
                                                            • Size 10KB
                                                            • SHA256 4ef1026df6520b6af1be8ff85e2311e05e232c1c0757786ae40b8094bcdc71b1
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw3a610ca0-e9e4-41d3-9d63-fd706eee02dd.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw3a610ca0-e9e4-41d3-9d63-fd706eee02dd.tmp
                                                            • Size 8KB
                                                            • SHA256 38c81ccec6d0d8fe13d7bd184c4a2d31b76b1d1c0b79cbae63acea1df3ee3b9d
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw42cfedcb-62d2-438f-8f6d-a902d1f3b2b7.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw42cfedcb-62d2-438f-8f6d-a902d1f3b2b7.tmp
                                                            • Size 1KB
                                                            • SHA256 0b4573deaadc95a8446e23335a34bf63b313e5a86767194a6f8bdd0972c84dee
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw4ae33610-b79a-4905-aa00-2592e8f525f1.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw4ae33610-b79a-4905-aa00-2592e8f525f1.tmp
                                                            • Size 1KB
                                                            • SHA256 d972f3bbcd3b3fe6e55b273eef2ce5a72a8ebe27f48144ad4f8e358d14bdc555
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw4d0581e7-7b14-4037-b993-588c993f5f49.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw4d0581e7-7b14-4037-b993-588c993f5f49.tmp
                                                            • Size 9KB
                                                            • SHA256 5cd35ef75e72dbc21bf2c500be24d2a6f2627a77a773a3b0bb2f58ecb085316e
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw4e9dadaf-70d9-4e4c-bd84-ce656e4de196.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw4e9dadaf-70d9-4e4c-bd84-ce656e4de196.tmp
                                                            • Size 1KB
                                                            • SHA256 3d23616cd258c62265ba1ff3176951fb5155de192b89c61afce1e52a63f4bcf3
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw5275b90c-ba96-46c3-b286-f9c4be2e0875.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw5275b90c-ba96-46c3-b286-f9c4be2e0875.tmp
                                                            • Size 10KB
                                                            • SHA256 3f4c17ad995057fe7d315e20680640031416e332ca82b08f45daac148531d363
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw53cfa2cf-80f5-4c7d-b150-30e77b511062.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw53cfa2cf-80f5-4c7d-b150-30e77b511062.tmp
                                                            • Size 8KB
                                                            • SHA256 ff76dbc20b2f67407089d335c5bbef7d05a312566991bfa914f86365a81e97f0
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw5e1d0d71-3652-45d6-8cfd-e71b1ce1b076.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw5e1d0d71-3652-45d6-8cfd-e71b1ce1b076.tmp
                                                            • Size 1KB
                                                            • SHA256 536263cceb810e13fc7ee30a4b9e34d313cb07e1e29a3db7630445318df5c53f
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw643b6aed-90c6-4898-aa7e-73af65779738.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw643b6aed-90c6-4898-aa7e-73af65779738.tmp
                                                            • Size 9KB
                                                            • SHA256 1ec73a317b656d13a57777a4dae86983db069d9063941a0fa94601ffead16fd1
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw6a9ddb0c-7f3f-4497-a046-cdd93375d55b.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw6a9ddb0c-7f3f-4497-a046-cdd93375d55b.tmp
                                                            • Size 10KB
                                                            • SHA256 011b50ca5777dcc28dfe42161fc334fc6aeda47efb034713a3f5c4f76e64e3ad
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw6ded9041-0860-456f-a1df-15279162dcbc.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw6ded9041-0860-456f-a1df-15279162dcbc.tmp
                                                            • Size 6KB
                                                            • SHA256 a336d313d50f8681fc78866311de92a8e6c6608a3d6e88689e81cc684eb85139
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw73175852-af26-4003-a841-3e03b3339209.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw73175852-af26-4003-a841-3e03b3339209.tmp
                                                            • Size 9KB
                                                            • SHA256 7d7df7b1b33c38e63bd96c304693c53b2af70ecc2febfb5a7982bc6c4e621bd3
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw775c953c-1ed6-4d12-8388-9dee891d58cb.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw775c953c-1ed6-4d12-8388-9dee891d58cb.tmp
                                                            • Size 8KB
                                                            • SHA256 e73045a073ff18bd80e8dd1372e57b65d57030a3c748d059b9ee214d2d46c2e2
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw92751e79-3bbf-4bd3-afae-80fe0207f993.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw92751e79-3bbf-4bd3-afae-80fe0207f993.tmp
                                                            • Size 10KB
                                                            • SHA256 c664bed45d8734a7b1253e72311ec9e128053b5ce2148a3b3c59124080476ee1
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw9d079be8-f9b4-46b5-8827-736121477e19.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw9d079be8-f9b4-46b5-8827-736121477e19.tmp
                                                            • Size 10KB
                                                            • SHA256 2bd9ed4f313c76c152394be74ba8e1d7468135fc40fbe820ed3c605939c9952a
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw9f1e0637-d446-4fac-8f9c-bc659b5364de.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.raw9f1e0637-d446-4fac-8f9c-bc659b5364de.tmp
                                                            • Size 10KB
                                                            • SHA256 99586c125bd39a9d4171b8b6661684f45b3a056f045eb59786194492dfa70515
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawae6c7453-9a92-4d65-a30e-7c16a5b306bc.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawae6c7453-9a92-4d65-a30e-7c16a5b306bc.tmp
                                                            • Size 9KB
                                                            • SHA256 1ef9057e5a0e5c29e3572b9ab5798ac671e2716fae6e2b07c9a47dbb47182b95
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawaec2fdfc-d534-4147-942e-46f0e6fcfea2.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawaec2fdfc-d534-4147-942e-46f0e6fcfea2.tmp
                                                            • Size 7KB
                                                            • SHA256 c17d698849d3eb4db91aff361b50be05f3057f29bf4980e8985d908235860e9e
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawb1528f3d-6a9d-4e27-b630-afe29f977f2e.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawb1528f3d-6a9d-4e27-b630-afe29f977f2e.tmp
                                                            • Size 9KB
                                                            • SHA256 01896d2af72376d4a701a1eec4d7dfdc09a709cbb7d43db69e11959d9606ad2f
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawb46c8caf-a41c-4e5a-82f2-0500788ea805.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawb46c8caf-a41c-4e5a-82f2-0500788ea805.tmp
                                                            • Size 1KB
                                                            • SHA256 6576de39f3fb033d42c17b62050c8b6843a19ffc60d224ebcd29eaaff35eb518
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawb5fb262e-5af9-4341-8e73-c13cba64001e.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawb5fb262e-5af9-4341-8e73-c13cba64001e.tmp
                                                            • Size 9KB
                                                            • SHA256 f60c1ee03dd64a29570be0973ff11a661f76282757f7f158123382086b37fce6
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawbc89106e-0a37-4452-9c65-6d12ecad5d5f.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawbc89106e-0a37-4452-9c65-6d12ecad5d5f.tmp
                                                            • Size 1KB
                                                            • SHA256 1b442092af61e0023edb7b6c5bf1c891df0fb709e796bdc6a1a6c501ac9b3643
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawbfc61ec3-3715-49b1-9129-9c9e081f07e5.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawbfc61ec3-3715-49b1-9129-9c9e081f07e5.tmp
                                                            • Size 10KB
                                                            • SHA256 1c367076993695d535e4d6113881b3a2bd6094a7c4774b59c4c825bf02176311
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawd04cf703-a465-4182-bb75-ad211d71d793.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawd04cf703-a465-4182-bb75-ad211d71d793.tmp
                                                            • Size 973B
                                                            • SHA256 0a346e8a77ed93f4cd6b28f8a56ef8c61583d84810c737d62b90404e589e2e28
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawd0cef358-880f-42bb-9063-153c5097f776.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawd0cef358-880f-42bb-9063-153c5097f776.tmp
                                                            • Size 8KB
                                                            • SHA256 cac0c210284bba2f351a2dd1b5485f18163e1ac120bad3a3f00cd88ef3ace1b3
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawd3c6c0bf-f951-4490-97f9-1c2f5a4b2ae9.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawd3c6c0bf-f951-4490-97f9-1c2f5a4b2ae9.tmp
                                                            • Size 8KB
                                                            • SHA256 34355aecfaddf462f537cc3cf637427486c35f165d964970d9384ad78d9651fc
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawd5779d89-3e7d-475a-b180-16ad3b531bab.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawd5779d89-3e7d-475a-b180-16ad3b531bab.tmp
                                                            • Size 8KB
                                                            • SHA256 5dbae3d869f4c277f3fd7c6b3b111c22f086a72b7425c841970137e9fa09c1ad
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawda648903-17c4-49a1-85a8-27f73e19c800.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawda648903-17c4-49a1-85a8-27f73e19c800.tmp
                                                            • Size 1KB
                                                            • SHA256 aebc09569346cfed7fb38bf4d01a258263a8cc5da88f93ecf2dc7f3f888fe050
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawde3d92eb-df48-4faf-af46-11bb7defc08f.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawde3d92eb-df48-4faf-af46-11bb7defc08f.tmp
                                                            • Size 8KB
                                                            • SHA256 07fa87028cafe74e4e4b3f65818da7dad12a8b179278947ac143f3b1b473af9c
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawe0566484-ed7c-4ad8-90fd-fe1230409b10.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawe0566484-ed7c-4ad8-90fd-fe1230409b10.tmp
                                                            • Size 6KB
                                                            • SHA256 4482616fdf873167754ce3dc31e532a7f374e7dfd45516da880dde82327a7c91
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawe199de68-9a39-437e-88ff-7ba68ff337c3.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawe199de68-9a39-437e-88ff-7ba68ff337c3.tmp
                                                            • Size 621B
                                                            • SHA256 be014f653393170b812e933598214a81dbb868e21b3282874ae6ef6433b8e0fb
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawe50a4f41-82a3-440f-8507-0696f26389b0.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawe50a4f41-82a3-440f-8507-0696f26389b0.tmp
                                                            • Size 9KB
                                                            • SHA256 9fcf2845ea66c2ae34a6f162afa10b285990496d6f9af3731dcc433e31056bfa
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawe8e30bb8-a83e-47a3-ae9c-b5605113b5bb.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawe8e30bb8-a83e-47a3-ae9c-b5605113b5bb.tmp
                                                            • Size 1KB
                                                            • SHA256 fd49136bbac49c1e5c3729cf7631bdaf6569896b0a6fbc7063173bf265300f82
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawedd119e0-6311-47c9-988a-0c5faa640ec8.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawedd119e0-6311-47c9-988a-0c5faa640ec8.tmp
                                                            • Size 493B
                                                            • SHA256 d822cbce8d94e24d4428b4b9978c342571c603788c1879b076ecc723284a2252
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawef422f1f-6f03-4800-9108-3c6ed0920e9a.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawef422f1f-6f03-4800-9108-3c6ed0920e9a.tmp
                                                            • Size 6KB
                                                            • SHA256 80a85aa23b3bb455c077ea4cb78a18ea1f33271a3c539d2bca04d829ce07451f
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawf44c61d2-d361-4a4a-b3ac-fddcabb2fc2a.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawf44c61d2-d361-4a4a-b3ac-fddcabb2fc2a.tmp
                                                            • Size 8KB
                                                            • SHA256 0b650c199a53c991a5d67e8ddbe7c610a5f1331f2291e14e56d4da507135c4a8
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawfd6368d7-7cf8-45f0-bc2b-6a0bbe7a8ab3.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawfd6368d7-7cf8-45f0-bc2b-6a0bbe7a8ab3.tmp
                                                            • Size 10KB
                                                            • SHA256 b5942753aa7886c7437a8489a3a429dfc319d57e481a7eadc75f024da2e7a9d7
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawfdc95148-e5ef-41c0-9465-d1b6c0d2bc01.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0c0b16a2-ae17-471e-a3a2-ddc869bf124b.rawfdc95148-e5ef-41c0-9465-d1b6c0d2bc01.tmp
                                                            • Size 10KB
                                                            • SHA256 a1c0097adcde50c13679bdc45ffa6b8a139c903a2f6c1236e6d773b29a95f5f8
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            session_7898b984-9f47-4234-a82c-661b456588ce.raw
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7898b984-9f47-4234-a82c-661b456588ce.raw
                                                            • Size 381B
                                                            • SHA256 48e2bc56cb477768379061b9bbb1c87044586c8951cce1a476630d44adf17c31
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_7898b984-9f47-4234-a82c-661b456588ce.raw0810f886-8043-472c-804e-a27cd5a24947.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7898b984-9f47-4234-a82c-661b456588ce.raw0810f886-8043-472c-804e-a27cd5a24947.tmp
                                                            • Size 1KB
                                                            • SHA256 fbcc1f46c751f8350afde258befa3c5998b254ede7ae6ce7119994766794d825
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_7898b984-9f47-4234-a82c-661b456588ce.raw3c490353-2ead-41e6-92d1-4aa4089f5071.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7898b984-9f47-4234-a82c-661b456588ce.raw3c490353-2ead-41e6-92d1-4aa4089f5071.tmp
                                                            • Size 1KB
                                                            • SHA256 f42c9ee7f013b6ddc707a0bfcd3c408de841ab8ab3e947dfb283c5f3eadaa690
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_7898b984-9f47-4234-a82c-661b456588ce.raw5c3344fd-978a-4f53-94c2-ff2f31466261.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7898b984-9f47-4234-a82c-661b456588ce.raw5c3344fd-978a-4f53-94c2-ff2f31466261.tmp
                                                            • Size 1KB
                                                            • SHA256 eb4bcc8740dc00daae62ff88d32406a62795318e1bffe9eae23e4c5a1766c3fe
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_7898b984-9f47-4234-a82c-661b456588ce.raw5fda4230-6666-4453-be51-431b166fd171.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7898b984-9f47-4234-a82c-661b456588ce.raw5fda4230-6666-4453-be51-431b166fd171.tmp
                                                            • Size 781B
                                                            • SHA256 76d262594268545577195b2757a4bcd71a7317f55ab2fb637c103702c395d1c8
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_7898b984-9f47-4234-a82c-661b456588ce.raw86319784-8a3c-4567-968c-00c77f0d1f06.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7898b984-9f47-4234-a82c-661b456588ce.raw86319784-8a3c-4567-968c-00c77f0d1f06.tmp
                                                            • Size 1KB
                                                            • SHA256 b7363e2ef1c66b09cbd01a17621afd14df7b2a1e238e8e2a4144248cede589b1
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_7898b984-9f47-4234-a82c-661b456588ce.rawb0ab4155-baa0-4cf6-9989-7d1381360260.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7898b984-9f47-4234-a82c-661b456588ce.rawb0ab4155-baa0-4cf6-9989-7d1381360260.tmp
                                                            • Size 797B
                                                            • SHA256 dea54bda5f56f65b0d226a9affa1d63f0fb1e8c1251f73cbde92c0d4148ce85d
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_7898b984-9f47-4234-a82c-661b456588ce.rawce14d4a4-9a33-40fc-a5ea-2e37d69cc7c4.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7898b984-9f47-4234-a82c-661b456588ce.rawce14d4a4-9a33-40fc-a5ea-2e37d69cc7c4.tmp
                                                            • Size 957B
                                                            • SHA256 3666678b7c6dda03d04721a61bd6be2f394ec51aebb6018db3a7ed8a32b67211
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_7898b984-9f47-4234-a82c-661b456588ce.rawcf31bd38-0ee1-4a62-a31f-f6303dc4a137.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7898b984-9f47-4234-a82c-661b456588ce.rawcf31bd38-0ee1-4a62-a31f-f6303dc4a137.tmp
                                                            • Size 797B
                                                            • SHA256 b787430bb4fb6e1a14a41e5d388c0fbf0744b17e7c96e33a8a4e94c62612de3a
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_7898b984-9f47-4234-a82c-661b456588ce.rawd7cef6f5-978b-419d-84ee-21053e5eb3cc.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7898b984-9f47-4234-a82c-661b456588ce.rawd7cef6f5-978b-419d-84ee-21053e5eb3cc.tmp
                                                            • Size 1KB
                                                            • SHA256 cfdb302c4f6fa5a5c2a38253f94752d4de6210fa07b04b7d1787451acf5da01d
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_7898b984-9f47-4234-a82c-661b456588ce.rawdad64348-e4da-4f37-b771-a5379a336e70.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7898b984-9f47-4234-a82c-661b456588ce.rawdad64348-e4da-4f37-b771-a5379a336e70.tmp
                                                            • Size 1KB
                                                            • SHA256 16f82c518b49fc9033b327257886a8729d12515e36fd7e0ecd389e790fe947d2
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_7898b984-9f47-4234-a82c-661b456588ce.rawdf8e12a6-81c6-460a-a588-d04fa5bc9725.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7898b984-9f47-4234-a82c-661b456588ce.rawdf8e12a6-81c6-460a-a588-d04fa5bc9725.tmp
                                                            • Size 493B
                                                            • SHA256 ca62c679bff76fdaebe0764d0effadb23ffb674ab5bb3fb7e6980cbeac119b22
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            session_7898b984-9f47-4234-a82c-661b456588ce.rawe5fcc028-c105-42c0-b03d-324d4ee12b49.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7898b984-9f47-4234-a82c-661b456588ce.rawe5fcc028-c105-42c0-b03d-324d4ee12b49.tmp
                                                            • Size 605B
                                                            • SHA256 47543e3b30f2976169e5398224c130b2c5d2a6fc2b18e8fee0a897cfc16b95e2
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            rhs.dat
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\rhs.dat
                                                            • Size 113KB
                                                            • SHA256 ec48b44b406c128cefe7e1cd672b0290ee87d91e9ca01302b53f93d793e96b11
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            ssdfp1912.0.904597658
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1912.0.904597658
                                                            • Size 203B
                                                            • SHA256 2b39c6d8d8641c078fff60dbb77d3ed14ec65a3eb28e14c3e0c4c68c057795a9
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp1912.0.9045976580dcf87af-45c4-4f8f-b319-60fa904c213a.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1912.0.9045976580dcf87af-45c4-4f8f-b319-60fa904c213a.tmp
                                                            • Size 265B
                                                            • SHA256 ebaf4b2ad09e9489f84be660f1599f932df740cc69044905ac8ae53d3878f1bd
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp1912.0.904597658763d3d1e-36df-4b85-b478-18892298c188.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1912.0.904597658763d3d1e-36df-4b85-b478-18892298c188.tmp
                                                            • Size 1KB
                                                            • SHA256 e4ef41035a1daac242171e7aad85d313c5e0221ef9a528cd33b43df857a00daa
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp1912.0.9045976589ca9bda8-20c3-45a8-8fa3-51cef7676ac4.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1912.0.9045976589ca9bda8-20c3-45a8-8fa3-51cef7676ac4.tmp
                                                            • Size 1KB
                                                            • SHA256 72c50e32c0be455cdc4259148c8a4c135db9a80f50e4545dd727e5c20f3c3712
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.0.1140472786
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.0.1140472786
                                                            • Size 457B
                                                            • SHA256 574d30e8717b9c2064548e610d5c3d044b97f141cb67ab56bb45688609d41f6f
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.0.1140472786044d0c59-8763-4f48-982e-ce1e5429c2bf.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.0.1140472786044d0c59-8763-4f48-982e-ce1e5429c2bf.tmp
                                                            • Size 914B
                                                            • SHA256 f4fa65633f9739af98bf3d644380e5123126523dbbaeada7f35fa832a477307a
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.0.11404727860e4bf426-f661-4a48-9b4b-d4c22e7c6db4.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.0.11404727860e4bf426-f661-4a48-9b4b-d4c22e7c6db4.tmp
                                                            • Size 3KB
                                                            • SHA256 bf7dbff47ac9cfb9e8c8436295d9381920a797512c3fce20f09d9d713424a23e
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.0.114047278616ea65b6-56cc-4c68-9f30-d84f2b5f1c76.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.0.114047278616ea65b6-56cc-4c68-9f30-d84f2b5f1c76.tmp
                                                            • Size 3KB
                                                            • SHA256 29c03d26e20c4eea0a4c2eea27b84ee800de2e7b68082db31e2c934602dd83d0
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.0.11404727862dca054f-a512-4911-9dae-8cf3078cd9cf.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.0.11404727862dca054f-a512-4911-9dae-8cf3078cd9cf.tmp
                                                            • Size 1KB
                                                            • SHA256 9ed0ba1bde68750efe34395b68c0818d6ef9b4173d1f11d16dd0fb948abd9f93
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.0.11404727862eda6321-7ace-47fc-94e0-968a77d1cd1c.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.0.11404727862eda6321-7ace-47fc-94e0-968a77d1cd1c.tmp
                                                            • Size 3KB
                                                            • SHA256 b42a83d7683e725a8e882babab92fad7c6e7b66b59698f182e14900a51603e60
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.0.1140472786345454f6-b724-43a7-a4bc-b57b90824528.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.0.1140472786345454f6-b724-43a7-a4bc-b57b90824528.tmp
                                                            • Size 555B
                                                            • SHA256 49faa659557b2de25145d7b5d020857948ceda0b82599231a98940faef858bd8
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.0.114047278634e6b498-0c3a-41e5-b29c-b9d8e3ecb506.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.0.114047278634e6b498-0c3a-41e5-b29c-b9d8e3ecb506.tmp
                                                            • Size 3KB
                                                            • SHA256 eb90c7129547d19f0b6cfeddf808f30b581c2f25ac67ef5bcff03c9b971e39a2
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.0.114047278648c081fd-fd4f-456d-8c8b-2f42e02c6a94.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.0.114047278648c081fd-fd4f-456d-8c8b-2f42e02c6a94.tmp
                                                            • Size 645B
                                                            • SHA256 d9e1ec57bb9c0c048e6832a0bea2d08aed8f1431cd175af5bca6643179337e9e
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.0.114047278652ab7a15-adb1-48cd-b861-023a3388bca4.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.0.114047278652ab7a15-adb1-48cd-b861-023a3388bca4.tmp
                                                            • Size 1KB
                                                            • SHA256 0a2f9123c9c58f08399f3d2824e429bc749a48bd383bbd14fc7d04ca71b7584b
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.0.11404727866274c2b8-de14-457c-9b34-cc78573fd683.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.0.11404727866274c2b8-de14-457c-9b34-cc78573fd683.tmp
                                                            • Size 1KB
                                                            • SHA256 eb6bf0bc304f7934b56287b43b55f11db523d64e0c2a197c2bf499b257d483c3
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.0.11404727866815cbe8-72ae-41e2-8f3d-12301156f8f1.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.0.11404727866815cbe8-72ae-41e2-8f3d-12301156f8f1.tmp
                                                            • Size 732B
                                                            • SHA256 2bc50cd1c3f961c5f71053f0effee4d942c4129491ac9a5e38a689b32a8bfec5
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.0.1140472786713979ab-212a-4955-9805-496570af478d.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.0.1140472786713979ab-212a-4955-9805-496570af478d.tmp
                                                            • Size 3KB
                                                            • SHA256 154664e73dff6f8fc53464c78d4be72a6a9b5838152d1c73ace5dd0b71866ebd
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.0.11404727868a00417b-1fb4-40fb-9464-71eee084ba0f.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.0.11404727868a00417b-1fb4-40fb-9464-71eee084ba0f.tmp
                                                            • Size 1KB
                                                            • SHA256 081ac76da0addb6a8dd5bade4acb9ea78d343c20fe423c18122efaf5cd8d1c81
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.0.11404727868f1281b0-cb51-4305-93dd-64e81d60fe18.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.0.11404727868f1281b0-cb51-4305-93dd-64e81d60fe18.tmp
                                                            • Size 3KB
                                                            • SHA256 bfee8813e5b244015f82cd7974c3514b8b1c123b947e7b66c128bd09a04bb1c6
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.0.1140472786973394fa-8417-46e7-aeb6-2b58b074530d.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.0.1140472786973394fa-8417-46e7-aeb6-2b58b074530d.tmp
                                                            • Size 1013B
                                                            • SHA256 fb98712a109c1ea7e8d77c1c7f769b988cfdc5174e9a7e2daf0dce1b91ba5ea4
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.0.1140472786a7f344a1-4203-469b-837a-698260be0e0c.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.0.1140472786a7f344a1-4203-469b-837a-698260be0e0c.tmp
                                                            • Size 3KB
                                                            • SHA256 081557aa25178fb7c77af7b92ac7ccaae58f060d3f00bc3dcbbf15a5f07fbdbe
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.0.1140472786ae86bec3-8224-43ec-9722-2340558c1e3b.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.0.1140472786ae86bec3-8224-43ec-9722-2340558c1e3b.tmp
                                                            • Size 1KB
                                                            • SHA256 a154e555de6510dd55765d911bf026d480dabd8bec5b63f496e44c9d3e549ad3
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.0.1140472786bbe8c12d-0b2d-403e-8da9-ce9003425d03.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.0.1140472786bbe8c12d-0b2d-403e-8da9-ce9003425d03.tmp
                                                            • Size 3KB
                                                            • SHA256 f5b6f7dcf3af666659bc05993ccf4af042fdd19bae8a051205fd08a339abb4cd
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.0.1140472786e2bc4bd0-44a4-4ec8-b337-302bf105ce22.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.0.1140472786e2bc4bd0-44a4-4ec8-b337-302bf105ce22.tmp
                                                            • Size 1KB
                                                            • SHA256 e26733363237da3719c55b5fab8debd1ccac1198eab1a64767b39ee4f9c3daa4
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.0.1140472786ea516efb-9c6f-4348-92c5-26cece2795b5.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.0.1140472786ea516efb-9c6f-4348-92c5-26cece2795b5.tmp
                                                            • Size 2KB
                                                            • SHA256 1ef32932ac8ddeade051e3d0c6f23485e481c8aabf73ac385f18195fffcfd305
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.0.1140472786f4975ded-504e-4aea-94ad-ab169b1f0d97.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.0.1140472786f4975ded-504e-4aea-94ad-ab169b1f0d97.tmp
                                                            • Size 818B
                                                            • SHA256 7f8626c7dd85f6967c44bab1afb5d0c4735fa84660b2d36034157e48c378c27b
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.0.1140472786f4f2fd35-3c59-4513-b14d-c684e8f72633.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.0.1140472786f4f2fd35-3c59-4513-b14d-c684e8f72633.tmp
                                                            • Size 1KB
                                                            • SHA256 3a42dd293bb7147d1f66ce524a4bc4ed6b49dc6813439e60baceb211a564662b
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.1.822246306
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.1.822246306
                                                            • Size 171B
                                                            • SHA256 bb2ad9ef8de3cd8eaf50a12b64ef9a55ba432dc3d7b5ced5857695c452f83d7b
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.1.8222463066160488f-799c-47ee-9a73-f371578e7bf8.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.1.8222463066160488f-799c-47ee-9a73-f371578e7bf8.tmp
                                                            • Size 224B
                                                            • SHA256 f5ef586d372f69b3f710a853dec2a39288dd5d6aa7f806bb25451ae18dc76791
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            ssdfp7032.1.82224630690204c97-0230-4f21-9c97-d8e54868ec97.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7032.1.82224630690204c97-0230-4f21-9c97-d8e54868ec97.tmp
                                                            • Size 200B
                                                            • SHA256 d25858aa441d4e1780e4dade77de5f5669d5a0d4c8d533107a10f3d4a816fb60
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            suggestions_cache.json6b3e9d8f-5102-4d0d-b9a3-31f52402efd8.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.json6b3e9d8f-5102-4d0d-b9a3-31f52402efd8.tmp
                                                            • Size 652KB
                                                            • SHA256 6abd76e31feda9edcbbab91e8898aaeb6e1aaa53cd873d7be3f5f02006106adb
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            Local State507658db-ff59-4455-bc2b-964356b75f0a.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State507658db-ff59-4455-bc2b-964356b75f0a.tmp
                                                            • Size 4KB
                                                            • SHA256 75a73ebc996e723ae3110d515f404feb5e577cf7e53a5f690043af0fd6214398
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            Local Statea37d4900-60d1-4311-be09-aaebdfc9cd43.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local Statea37d4900-60d1-4311-be09-aaebdfc9cd43.tmp
                                                            • Size 5KB
                                                            • SHA256 d49ccbdf6c2336b0af9abd9b88e790809e9e976017cd1ebed4ead0c5e7ac8013
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            Local Stateda547497-d2a8-4c4d-88b7-67f75cc3724b.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local Stateda547497-d2a8-4c4d-88b7-67f75cc3724b.tmp
                                                            • Size 3KB
                                                            • SHA256 853d0625a4c7d78a4c8027273ea18852f731cdefa32c315842f8cc94927b94b3
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            VariationsSafeSeedV2
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSafeSeedV2
                                                            • Size 19B
                                                            • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                            • MD5 SHA1 SHA512
                                                            Submit Download

                                                            VariationsSeedV258c8bd0c-6096-465a-b57f-79c4cdfd5874.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV258c8bd0c-6096-465a-b57f-79c4cdfd5874.tmp
                                                            • Size 11B
                                                            • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                            • MD5 SHA1 SHA512
                                                            Submit Download

                                                            clipboard_injection_guard_rules.json
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\clipboard_injection_guard_rules.json
                                                            • Size 6KB
                                                            • SHA256 b8d84b82da3d90323de6cf1b4e3594bf7acb99101c72379b10f4b982f82bd487
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            metadata.json403c1739-90b3-4107-85af-af6d2c682f1c.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json403c1739-90b3-4107-85af-af6d2c682f1c.tmp
                                                            • Size 124B
                                                            • SHA256 6157194d5fef6179fe235abf9b26a284cd145b63da0e400dbfbc22934aa1b213
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            metadata.json16798d9d-133e-43b9-9427-7b8b84441ad2.tmp
                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\extensions_crx_cache\metadata.json16798d9d-133e-43b9-9427-7b8b84441ad2.tmp
                                                            • Size 13B
                                                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                            • MD5 SHA1 SHA512
                                                            Submit Download

                                                            manifest.json
                                                            • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping7032_1999786974\manifest.json
                                                            • Size 73B
                                                            • SHA256 665f841d266f0d6eedf1e635138cd954542dc028a9e8c47e0b29f90cd772d3e8
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            opera-one.jpg
                                                            • Path C:\Windows\SystemTemp\scoped_dir7032_1481489031\opera-one.jpg
                                                            • Size 194KB
                                                            • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            persona.ini
                                                            • Path C:\Windows\SystemTemp\scoped_dir7032_1481489031\persona.ini
                                                            • Size 207B
                                                            • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            opera-one-dark.jpg
                                                            • Path C:\Windows\SystemTemp\scoped_dir7032_1658006466\opera-one-dark.jpg
                                                            • Size 349KB
                                                            • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                            Submit Download

                                                            persona.ini
                                                            • Path C:\Windows\SystemTemp\scoped_dir7032_1658006466\persona.ini
                                                            • Size 217B
                                                            • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                                            • MD5 SHA1 SHA512 TLSH
                                                            Submit Download

                                                            memory/756-2830-0x0000029DE1300000-0x0000029DE167C000-memory.dmp
                                                            Download

                                                            memory/920-2828-0x000001C1210B0000-0x000001C12142C000-memory.dmp
                                                            Download

                                                            memory/1128-2808-0x0000021432560000-0x00000214328DC000-memory.dmp
                                                            Download

                                                            memory/1476-2833-0x0000024318110000-0x000002431848C000-memory.dmp
                                                            Download

                                                            memory/1864-2825-0x0000020F4D530000-0x0000020F4D8AC000-memory.dmp
                                                            Download

                                                            memory/2540-3134-0x0000028442350000-0x00000284426CC000-memory.dmp
                                                            Download

                                                            memory/2756-2832-0x000002061C620000-0x000002061C99C000-memory.dmp
                                                            Download

                                                            memory/3248-2721-0x000001E00D7B0000-0x000001E00DB2C000-memory.dmp
                                                            Download

                                                            memory/3344-2836-0x0000023C95310000-0x0000023C9568C000-memory.dmp
                                                            Download

                                                            memory/3356-2816-0x00000264D64E0000-0x00000264D685C000-memory.dmp
                                                            Download

                                                            memory/3608-2831-0x0000020F1FFE0000-0x0000020F2035C000-memory.dmp
                                                            Download

                                                            memory/3748-2824-0x00000194B25F0000-0x00000194B296C000-memory.dmp
                                                            Download

                                                            memory/3748-1830-0x0000018D99BC0000-0x0000018D99F3C000-memory.dmp
                                                            Download

                                                            memory/4108-2817-0x000002E1B4F60000-0x000002E1B52DC000-memory.dmp
                                                            Download

                                                            memory/4300-3142-0x000002C88CA90000-0x000002C88CE0C000-memory.dmp
                                                            Download

                                                            memory/4312-595-0x00007FF8C1470000-0x00007FF8C1471000-memory.dmp
                                                            Download

                                                            memory/4312-1888-0x000002762FAD0000-0x000002762FE4C000-memory.dmp
                                                            Download

                                                            memory/4312-596-0x00007FF8C0DF0000-0x00007FF8C0DF1000-memory.dmp
                                                            Download

                                                            memory/4372-2829-0x000002089BFF0000-0x000002089C36C000-memory.dmp
                                                            Download

                                                            memory/4416-2730-0x000001C2A0520000-0x000001C2A089C000-memory.dmp
                                                            Download

                                                            memory/4820-2837-0x000001D2D17B0000-0x000001D2D1B2C000-memory.dmp
                                                            Download

                                                            memory/4860-2815-0x0000017146D30000-0x00000171470AC000-memory.dmp
                                                            Download

                                                            memory/4864-1829-0x000001E4B9B10000-0x000001E4B9E8C000-memory.dmp
                                                            Download

                                                            memory/4864-2822-0x000001AD97580000-0x000001AD978FC000-memory.dmp
                                                            Download

                                                            memory/4992-3361-0x000001C6A6000000-0x000001C6A637C000-memory.dmp
                                                            Download

                                                            memory/5276-3577-0x000001264A090000-0x000001264A40C000-memory.dmp
                                                            Download

                                                            memory/5280-2975-0x000001A8E7890000-0x000001A8E7C0C000-memory.dmp
                                                            Download

                                                            memory/5612-2741-0x0000025E70DF0000-0x0000025E7116C000-memory.dmp
                                                            Download

                                                            memory/5896-1831-0x0000023D020C0000-0x0000023D0243C000-memory.dmp
                                                            Download

                                                            memory/5924-2744-0x0000011816370000-0x00000118166EC000-memory.dmp
                                                            Download

                                                            memory/6028-2823-0x000002A904EF0000-0x000002A90526C000-memory.dmp
                                                            Download

                                                            memory/6136-2820-0x00000203B2E50000-0x00000203B31CC000-memory.dmp
                                                            Download

                                                            memory/6180-2743-0x00000228F0020000-0x00000228F039C000-memory.dmp
                                                            Download

                                                            memory/6200-2742-0x000001E1A4BD0000-0x000001E1A4F4C000-memory.dmp
                                                            Download

                                                            memory/6256-2767-0x000002497ECB0000-0x000002497F02C000-memory.dmp
                                                            Download

                                                            memory/6388-2807-0x000002C164680000-0x000002C1649FC000-memory.dmp
                                                            Download

                                                            memory/6392-2739-0x0000016650BE0000-0x0000016650F5C000-memory.dmp
                                                            Download

                                                            memory/6420-2740-0x000001A358820000-0x000001A358B9C000-memory.dmp
                                                            Download

                                                            memory/6440-2768-0x0000028CC35E0000-0x0000028CC395C000-memory.dmp
                                                            Download

                                                            memory/6656-2821-0x000001E91AF20000-0x000001E91B29C000-memory.dmp
                                                            Download

                                                            memory/6728-1935-0x0000026B66290000-0x0000026B66341000-memory.dmp
                                                            Download

                                                            memory/6760-3141-0x000001817A2B0000-0x000001817A62C000-memory.dmp
                                                            Download

                                                            memory/6780-2819-0x000001F7496D0000-0x000001F749A4C000-memory.dmp
                                                            Download

                                                            memory/6820-2827-0x0000013A6DA70000-0x0000013A6DDEC000-memory.dmp
                                                            Download

                                                            memory/6888-2805-0x00000238E2FC0000-0x00000238E333C000-memory.dmp
                                                            Download

                                                            memory/6956-2766-0x000001B5174C0000-0x000001B51783C000-memory.dmp
                                                            Download

                                                            memory/6968-2818-0x0000023538C80000-0x0000023538FFC000-memory.dmp
                                                            Download

                                                            memory/6976-2806-0x00000255920C0000-0x000002559243C000-memory.dmp
                                                            Download

                                                            memory/7148-2826-0x000002B1F8850000-0x000002B1F8BCC000-memory.dmp
                                                            Download

                                                            memory/7584-2834-0x000001FD9F0A0000-0x000001FD9F41C000-memory.dmp
                                                            Download

                                                            memory/7588-3136-0x0000026A79BE0000-0x0000026A79F5C000-memory.dmp
                                                            Download

                                                            memory/7672-3360-0x000002AC15A00000-0x000002AC15D7C000-memory.dmp
                                                            Download

                                                            memory/8388-2907-0x000001B3937B0000-0x000001B393B2C000-memory.dmp
                                                            Download

                                                            memory/8504-2971-0x00000193390C0000-0x000001933943C000-memory.dmp
                                                            Download

                                                            memory/8592-2972-0x000001C146460000-0x000001C1467DC000-memory.dmp
                                                            Download

                                                            memory/8852-3092-0x000001D9AFB60000-0x000001D9AFEDC000-memory.dmp
                                                            Download

                                                            memory/8864-2835-0x00000172B5760000-0x00000172B5ADC000-memory.dmp
                                                            Download

                                                            memory/8900-3135-0x000001C9B3060000-0x000001C9B33DC000-memory.dmp
                                                            Download

                                                            memory/8988-3265-0x0000026D804B0000-0x0000026D8082C000-memory.dmp
                                                            Download