Overview

overview

8

Static

static

8

OperaInstaller.exe

windows10-2004-x64

8

OperaInstaller.exe

windows11-ltsc_2024-x64

8

Resubmissions

27/10/2026, 00:13

261027-ah4h4aat3l

27/10/2026, 00:01

261027-aa21asxt5n8

Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    146s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    27/10/2026, 00:01

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaInstaller.exe
  • Size 178KB
  • Sample261027-aa21asxt5n
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealer

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Writes a Windows system DLL name to a user directory 2 TTPs 2 IoCs

    A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

    defense_evasion
  • Adds Run key to start application 2 TTPs 3 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 11 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 18 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 11 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 5 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 49 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe"
    1⤵
    • Downloads MZ/PE file
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4620
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2044
      • C:\Users\Admin\AppData\Local\Temp\7zSCF7C9E49\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zSCF7C9E49\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
        3⤵
        • Downloads MZ/PE file
        • Executes dropped EXE
        • Enumerates connected drives
        • Reads the TCP/IP host and domain name from the registry
        • Suspicious use of WriteProcessMemory
        PID:1676
        • C:\Users\Admin\AppData\Local\Temp\7zSCF7C9E49\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zSCF7C9E49\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff72fc7d2d8,0x7ff72fc7d2e8,0x7ff72fc7d2f8
          4⤵
          • Executes dropped EXE
          PID:4416
        • C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:6140
        • C:\Users\Admin\AppData\Local\Temp\7zSCF7C9E49\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zSCF7C9E49\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=1676 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\opera_package_20261027000224" --session-guid=26f82a86-67d6-4cd9-99f4-e210ffb9b79f --server-tracking-blob="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 " --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=0409000000000000
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Suspicious use of WriteProcessMemory
          PID:4552
          • C:\Users\Admin\AppData\Local\Temp\7zSCF7C9E49\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zSCF7C9E49\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x2b8,0x2bc,0x2c0,0x288,0x2c4,0x7ff72fc7d2d8,0x7ff72fc7d2e8,0x7ff72fc7d2f8
            5⤵
            • Executes dropped EXE
            PID:6000
          • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\installer.exe" --backend --initial-pid=1676 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\opera_package_202610270002241" --session-guid=26f82a86-67d6-4cd9-99f4-e210ffb9b79f --server-tracking-blob="NWY4ZDNkMDIxNDBmMzUzMWVkNDEyMmE1MzQ1NGI1NjAwZmMyNGI3NjQwODcxNDkzY2NjZDQ5YTdlNjY4NzllNDp7ImNvdW50cnkiOiJHQiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijp7Im5hbWUiOiJvcGVyYSJ9LCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fc291cmNlPXdyayZ1dG1fbWVkaXVtPXBiJnV0bV9jYW1wYWlnbj12aWRlby1zdHJlYW1pbmciLCJzeXN0ZW0iOnsicGxhdGZvcm0iOnsiYXJjaCI6Ing4Nl82NCIsIm9wc3lzIjoiV2luZG93cyIsIm9wc3lzLXZlcnNpb24iOiIxMSIsInBhY2thZ2UiOiJFWEUifX0sInRpbWVzdGFtcCI6IjE3OTMwNTkzNDEuNjI0NCIsInVzZXJhZ2VudCI6Ik9wZXJhIEluc3RhbGxlci8xLjAiLCJ1dG0iOnsiY2FtcGFpZ24iOiJ2aWRlby1zdHJlYW1pbmciLCJtZWRpdW0iOiJwYiIsInNvdXJjZSI6IndyayJ9LCJ1dWlkIjoiMTNiMzcwMWEtNjlkOS00M2MwLTg0ZDktMjM3NjlkZWYxYTYxIn0= " --silent --desktopshortcut=1 --install-subfolder=138.0.6044.24
            5⤵
            • Executes dropped EXE
            • Enumerates connected drives
            • Modifies registry class
            • Suspicious use of WriteProcessMemory
            PID:3800
            • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x2b0,0x2b4,0x2b8,0x288,0x2c0,0x7ff60491d2d8,0x7ff60491d2e8,0x7ff60491d2f8
              6⤵
              • Executes dropped EXE
              PID:2676
            • C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\opera_package_202610270002241\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\opera_package_202610270002241\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Writes a Windows system DLL name to a user directory
              • Adds Run key to start application
              • System Location Discovery: System Language Discovery
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:5816
              • C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\opera_package_202610270002241\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\opera_package_202610270002241\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xa2c9cc,0xa2c9d8,0xa2c9e4
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:4152
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:4468
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x99c9cc,0x99c9d8,0x99c9e4
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:5948
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Reads the TCP/IP host and domain name from the registry
                  • System Location Discovery: System Language Discovery
                  • Enumerates system info in registry
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:4832
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:4840
                    • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x27c,0x280,0x284,0x278,0x288,0x7ff8609c68a0,0x7ff8609c68b0,0x7ff8609c68c0
                      10⤵
                      • Executes dropped EXE
                      PID:5132
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:4616
                    • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x284,0x288,0x28c,0x280,0x290,0x7ff8609c68a0,0x7ff8609c68b0,0x7ff8609c68c0
                      10⤵
                      • Executes dropped EXE
                      PID:1880
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2a0,0x2a4,0x2a8,0x288,0x2ac,0x6c7324,0x6c7330,0x6c733c
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:1140
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:5256
                      • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ff8609c68a0,0x7ff8609c68b0,0x7ff8609c68c0
                        11⤵
                        • Executes dropped EXE
                        PID:2588
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:5908
                      • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x27c,0x280,0x284,0x278,0x288,0x7ff8609c68a0,0x7ff8609c68b0,0x7ff8609c68c0
                        11⤵
                        • Executes dropped EXE
                        PID:4252
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:5064
                      • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ff8609c68a0,0x7ff8609c68b0,0x7ff8609c68c0
                        11⤵
                        • Executes dropped EXE
                        PID:4580
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\opera_package_202610270002241\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:3944
              • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x240,0x278,0x27c,0x23c,0x280,0x7ff8609c68a0,0x7ff8609c68b0,0x7ff8609c68c0
                7⤵
                • Executes dropped EXE
                PID:4400
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1940,i,13615642886410391272,50577188840757791,524288 --field-trial-handle=2132,i,12503179982191858715,18304993691857198076,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,15655083607611744548,2843372807614515369,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2180 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                PID:4700
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --gpu-recent-crash-count=0 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1724,i,15516043719566273246,13419949631998846120,262144 --field-trial-handle=2132,i,12503179982191858715,18304993691857198076,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,15655083607611744548,2843372807614515369,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2128 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4412
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2456,i,14086573879506728967,6568261157266107676,524288 --field-trial-handle=2132,i,12503179982191858715,18304993691857198076,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,15655083607611744548,2843372807614515369,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2556 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4676
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3604,i,12086811805199811304,9278635222927284628,1572864 --field-trial-handle=2132,i,12503179982191858715,18304993691857198076,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,15655083607611744548,2843372807614515369,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3672 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:3260
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3860,i,14020129993413056659,16847677530487243893,1572864 --field-trial-handle=2132,i,12503179982191858715,18304993691857198076,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,15655083607611744548,2843372807614515369,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3904 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:3296
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4020,i,14731682981606293319,6739322654754300405,524288 --field-trial-handle=2132,i,12503179982191858715,18304993691857198076,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,15655083607611744548,2843372807614515369,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3832 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:4140
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3512,i,16834045025201030847,4350467668591429604,524288 --field-trial-handle=2132,i,12503179982191858715,18304993691857198076,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,15655083607611744548,2843372807614515369,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4628 /prefetch:12
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:3140
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5024,i,6356752916206186731,485758631334339765,524288 --field-trial-handle=2132,i,12503179982191858715,18304993691857198076,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,15655083607611744548,2843372807614515369,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=5028 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:3280
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5188,i,18354302191392320014,12713879738877529954,524288 --field-trial-handle=2132,i,12503179982191858715,18304993691857198076,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,15655083607611744548,2843372807614515369,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5196 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5860
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:992
              • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ff8609c68a0,0x7ff8609c68b0,0x7ff8609c68c0
                7⤵
                • Executes dropped EXE
                PID:2708
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --gpu-recent-crash-count=0 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1744,i,14390624327387087429,7689667904143424399,262144 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2216 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6276
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1956,i,3963969517145561642,1760720452959983286,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2284 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                PID:6288
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3080,i,515786248899704783,13642784983672060220,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3328 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6384
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3424,i,8490848167033645824,10477545339854817068,1572864 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3444 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6916
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3040,i,11569581760150803670,15125381822442863169,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3268 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6396
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3092,i,6371321460703990282,10612624427403058443,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3348 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6408
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3056,i,5437801104956360521,2980716519569726670,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3288 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6924
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2456,i,10988672239278797250,18126134843157597597,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3236 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6416
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3068,i,13397057543587410852,833452427086788649,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3308 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6932
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3116,i,9472861837611201031,5426317024150249408,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3396 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:6424
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3104,i,4902280835501494799,3477432501376715337,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3368 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6380
              • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_gx_splash.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                7⤵
                • Executes dropped EXE
                • Modifies registry class
                • Suspicious use of AdjustPrivilegeToken
                PID:4388
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4804,i,5794283901759805364,5254430312375629975,1572864 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4808 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:5308
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4972,i,4207351019900199412,1263894145068075832,1572864 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4988 /prefetch:1
                7⤵
                • Executes dropped EXE
                PID:4576
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5248,i,16479949961067251214,4647303834632746533,1572864 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5260 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7024
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5404,i,17668406540237470658,7733651714595888526,1572864 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5424 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7156
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6004,i,18109493750453963777,10031043250600107308,1572864 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6124 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7068
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6880,i,2782320950880615527,15703299545653974431,1572864 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6936 /prefetch:9
                7⤵
                • Executes dropped EXE
                PID:5892
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6736,i,4648644964922126231,11160494567820616,1572864 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=7000 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:3856
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6840,i,2372355828770203927,5078162402314478003,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=7444 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:6928
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7468,i,11266052451260796972,11618311554381290278,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7580 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7104
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5784,i,4911991259993125162,15491312734111094723,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7652 /prefetch:14
                7⤵
                  PID:6804
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6648,i,16110959134377990129,8265547278625779414,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7620 /prefetch:14
                  7⤵
                  • Executes dropped EXE
                  PID:6428
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7352,i,16144983716611032286,9659493310085573974,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7672 /prefetch:14
                  7⤵
                  • Enumerates system info in registry
                  PID:6900
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4832,i,12616544490328895372,4328796553046352482,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7976 /prefetch:14
                  7⤵
                  • Enumerates system info in registry
                  PID:7000
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7304,i,1035185371262988667,6548425854422559403,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7328 /prefetch:12
                  7⤵
                  • Enumerates system info in registry
                  PID:4392
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=7212,i,15897612948448628662,17896452399193412363,1572864 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=6776 /prefetch:1
                  7⤵
                  • Enumerates system info in registry
                  PID:2140
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8364,i,8734919902821088860,14295454616382340651,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8444 /prefetch:14
                  7⤵
                    PID:5612
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7100,i,13551020581645926392,9982598521856119983,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8464 /prefetch:14
                    7⤵
                      PID:1344
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8504,i,6490630904511652647,924945229667291228,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8724 /prefetch:14
                      7⤵
                        PID:1892
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=8880,i,7136113740816172777,5374306507221840419,1572864 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8888 /prefetch:9
                        7⤵
                          PID:4752
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8908,i,16525214921209899219,240927509401039217,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8960 /prefetch:14
                          7⤵
                          • Enumerates system info in registry
                          PID:2152
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9372,i,624265732851396969,17552481958247908123,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=9512 /prefetch:14
                          7⤵
                            PID:7096
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9628,i,2138421269898635354,3802169526474882524,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9672 /prefetch:14
                            7⤵
                            • Enumerates system info in registry
                            PID:2472
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9636,i,7902699200077309942,16680727638757025089,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9692 /prefetch:14
                            7⤵
                              PID:4300
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9660,i,17303840324404974555,3047789232440546117,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9756 /prefetch:14
                              7⤵
                              • Enumerates system info in registry
                              PID:5160
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9644,i,9616839050557198509,9677753644041056000,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9712 /prefetch:14
                              7⤵
                                PID:1044
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9652,i,1416255401453146153,6621183068618090429,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9736 /prefetch:14
                                7⤵
                                • Enumerates system info in registry
                                PID:6444
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10332,i,12369716325673355277,3765038912652307283,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10324 /prefetch:14
                                7⤵
                                  PID:2080
                                • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                  7⤵
                                  • Reads the TCP/IP host and domain name from the registry
                                  • Enumerates system info in registry
                                  PID:7572
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                    C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x29c,0x2a0,0x2a4,0x270,0x2a8,0x7ff6edd63df8,0x7ff6edd63e08,0x7ff6edd63e18
                                    8⤵
                                      PID:7792
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10500,i,3653849652081720466,9999049817880061930,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10516 /prefetch:14
                                    7⤵
                                      PID:7584
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10172,i,13052382863772591277,8969765585694903798,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10536 /prefetch:14
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:7592
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10828,i,15823542225224520040,2112942809807530911,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=3340 /prefetch:14
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:7900
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10940,i,4872065259141182869,7485222422052751918,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10936 /prefetch:14
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:7964
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=3136,i,8731786076173304973,7673940020078616502,1572864 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=10564 /prefetch:1
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:8056
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10168,i,4955294284674316872,9609775226637539836,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=10488 /prefetch:14
                                      7⤵
                                        PID:6764
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5532,i,10672964463384685848,12001113897660140918,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=10888 /prefetch:14
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:6816
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4068,i,15926977318057894671,8211431526390456596,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=3608 /prefetch:14
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:7728
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3664,i,3830405659152013238,15555892921274422744,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=3564 /prefetch:14
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:7788
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4648,i,971014351311378958,10059792196562619816,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=4612 /prefetch:14
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:7832
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4164,i,16013003545549040878,2242300151574266159,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=4152 /prefetch:14
                                        7⤵
                                          PID:8104
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3856,i,11048870808892865839,9533749275634606530,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=3832 /prefetch:14
                                          7⤵
                                          • Enumerates system info in registry
                                          PID:8100
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3356,i,8225034011663262535,10224058692600257841,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=5560 /prefetch:14
                                          7⤵
                                          • Enumerates system info in registry
                                          PID:8044
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3920,i,11300446666647685766,14098508563618669535,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=3884 /prefetch:14
                                          7⤵
                                            PID:4592
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11008,i,670958503042734038,4103497632450713731,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=11000 /prefetch:14
                                            7⤵
                                              PID:5040
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=3840,i,4649855571532282421,15375946161718540410,1572864 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=5572 /prefetch:9
                                              7⤵
                                              • Enumerates system info in registry
                                              PID:5944
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3908,i,73145858321373874,10208721591682937806,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=5568 /prefetch:14
                                              7⤵
                                                PID:7484
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10972,i,17311231784861114019,17104695414946346359,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=11036 /prefetch:14
                                                7⤵
                                                • Enumerates system info in registry
                                                PID:2636
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8552,i,16999547073385817365,15075697888544141135,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=4648 /prefetch:14
                                                7⤵
                                                • Enumerates system info in registry
                                                PID:6928
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3896,i,8501610281517299225,17129546121998379953,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=10976 /prefetch:14
                                                7⤵
                                                • Enumerates system info in registry
                                                PID:6396
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=4188,i,12840670881909571845,9924189160841993727,1572864 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=4520 /prefetch:9
                                                7⤵
                                                  PID:7488
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10984,i,13337141920073993052,847634445991198315,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=10992 /prefetch:14
                                                  7⤵
                                                  • Enumerates system info in registry
                                                  PID:8072
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=4076,i,10325462290293947477,1995175208430393033,1572864 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=11000 /prefetch:9
                                                  7⤵
                                                    PID:1260
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=9816,i,13605904725876722009,3642386780349353687,1572864 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=3112 /prefetch:9
                                                    7⤵
                                                      PID:1176
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=5152,i,7936888478823396592,12198459544427440072,1572864 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=4116 /prefetch:9
                                                      7⤵
                                                      • Enumerates system info in registry
                                                      PID:3540
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11008,i,3320533688886423615,1784613242114970322,524288 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=7192 /prefetch:14
                                                      7⤵
                                                      • Enumerates system info in registry
                                                      PID:6672
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=6996,i,11743471885470765205,17913844522390348208,1572864 --field-trial-handle=2224,i,8219878224061507329,1310474587009849475,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2228,i,2728662038254365716,18317014535623345768,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=10464 /prefetch:9
                                                      7⤵
                                                        PID:7208
                                                • C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\opera_package_202610270002241\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe
                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\opera_package_202610270002241\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe"
                                                  4⤵
                                                  • Executes dropped EXE
                                                  • Writes a Windows system DLL name to a user directory
                                                  • System Location Discovery: System Language Discovery
                                                  PID:5616
                                                • C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\opera_package_202610270002241\assistant\assistant_installer.exe
                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\opera_package_202610270002241\assistant\assistant_installer.exe" --version
                                                  4⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • System Location Discovery: System Language Discovery
                                                  • Enumerates system info in registry
                                                  • Suspicious use of WriteProcessMemory
                                                  PID:1804
                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\opera_package_202610270002241\assistant\assistant_installer.exe
                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\opera_package_202610270002241\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xa2c9cc,0xa2c9d8,0xa2c9e4
                                                    5⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    • System Location Discovery: System Language Discovery
                                                    PID:5960
                                          • C:\Windows\system32\svchost.exe
                                            C:\Windows\system32\svchost.exe -k GPSvcGroup
                                            1⤵
                                              PID:3144
                                            • C:\Windows\system32\wbem\unsecapp.exe
                                              C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                              1⤵
                                                PID:4304
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                                1⤵
                                                • Executes dropped EXE
                                                • Loads dropped DLL
                                                • Enumerates system info in registry
                                                • Suspicious use of WriteProcessMemory
                                                PID:5080
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                                                  C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ff8609c68a0,0x7ff8609c68b0,0x7ff8609c68c0
                                                  2⤵
                                                  • Executes dropped EXE
                                                  PID:3124
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                1⤵
                                                • Reads the TCP/IP host and domain name from the registry
                                                • Enumerates system info in registry
                                                PID:7652
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                  C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff6edd63df8,0x7ff6edd63e08,0x7ff6edd63e18
                                                  2⤵
                                                    PID:4336
                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                    2⤵
                                                      PID:8040

                                                  Network

                                                        MITRE ATT&CK Enterprise v16

                                                        Reconnaissance

                                                        Resource Development

                                                        Initial Access

                                                        Execution

                                                        Persistence

                                                        Boot or Logon Autostart Execution

                                                        1
                                                        T1547

                                                        Registry Run Keys / Startup Folder

                                                        1
                                                        T1547.001

                                                        Event Triggered Execution

                                                        1
                                                        T1546

                                                        Component Object Model Hijacking

                                                        1
                                                        T1546.015

                                                        Hijack Execution Flow

                                                        1
                                                        T1574

                                                        DLL Search Order Hijacking

                                                        1
                                                        T1574.001

                                                        Privilege Escalation

                                                        Boot or Logon Autostart Execution

                                                        1
                                                        T1547

                                                        Registry Run Keys / Startup Folder

                                                        1
                                                        T1547.001

                                                        Event Triggered Execution

                                                        1
                                                        T1546

                                                        Component Object Model Hijacking

                                                        1
                                                        T1546.015

                                                        Hijack Execution Flow

                                                        1
                                                        T1574

                                                        DLL Search Order Hijacking

                                                        1
                                                        T1574.001

                                                        Defense Evasion

                                                        Hijack Execution Flow

                                                        1
                                                        T1574

                                                        DLL Search Order Hijacking

                                                        1
                                                        T1574.001

                                                        Masquerading

                                                        1
                                                        T1036

                                                        Match Legitimate Name or Location

                                                        1
                                                        T1036.005

                                                        Modify Registry

                                                        2
                                                        T1112

                                                        Credential Access

                                                        Credentials from Password Stores

                                                        1
                                                        T1555

                                                        Credentials from Web Browsers

                                                        1
                                                        T1555.003

                                                        Unsecured Credentials

                                                        1
                                                        T1552

                                                        Credentials In Files

                                                        1
                                                        T1552.001

                                                        Discovery

                                                        Peripheral Device Discovery

                                                        1
                                                        T1120

                                                        Query Registry

                                                        5
                                                        T1012

                                                        System Information Discovery

                                                        4
                                                        T1082

                                                        System Location Discovery

                                                        1
                                                        T1614

                                                        System Language Discovery

                                                        1
                                                        T1614.001

                                                        System Network Configuration Discovery

                                                        1
                                                        T1016

                                                        System Time Discovery

                                                        1
                                                        T1124

                                                        Lateral Movement

                                                        Collection

                                                        Data from Local System

                                                        1
                                                        T1005

                                                        Command and Control

                                                        Exfiltration

                                                        Impact

                                                        Replay Monitor

                                                        Loading Replay Monitor...

                                                        Downloads

                                                        E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                        • Size 471B
                                                        • SHA256 4bb8bbb8179a94f2268a6f6c5cc0ddf5a58de522b78d9b4711dd6654d5569884
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                        • Size 416B
                                                        • SHA256 621dc1ad59cd24bbb47aec3645605675f2d72c0a8fca42debc6c48c4564395d9
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        snapshot-new.baf
                                                        • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\No_Vary_Search\snapshot-new.baf
                                                        • Size 20B
                                                        • SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        f_000001
                                                        • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
                                                        • Size 163KB
                                                        • SHA256 f4cbcb5475d169b277da2e33cd8a1447b247ae5bc38372e3b378ce9449cdc7ce
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        138.0.6044.24.manifest
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\138.0.6044.24.manifest
                                                        • Size 225B
                                                        • SHA256 a308596d8f06659398ed38592a261ccd03ec12525ffddc8208120ebe5517abb8
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        150x150Logo.scale-100.png
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-100.png
                                                        • Size 1KB
                                                        • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        150x150Logo.scale-100_contrast-white.png
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-100_contrast-white.png
                                                        • Size 1KB
                                                        • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        150x150Logo.scale-140.png
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-140.png
                                                        • Size 1KB
                                                        • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        150x150Logo.scale-140_contrast-white.png
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-140_contrast-white.png
                                                        • Size 1KB
                                                        • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        150x150Logo.scale-180.png
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-180.png
                                                        • Size 1KB
                                                        • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        150x150Logo.scale-180_contrast-white.png
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-180_contrast-white.png
                                                        • Size 1KB
                                                        • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        150x150Logo.scale-80.png
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-80.png
                                                        • Size 827B
                                                        • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        150x150Logo.scale-80_contrast-white.png
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-80_contrast-white.png
                                                        • Size 799B
                                                        • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        70x70Logo.scale-100.png
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-100.png
                                                        • Size 781B
                                                        • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        70x70Logo.scale-100_contrast-white.png
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-100_contrast-white.png
                                                        • Size 752B
                                                        • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        70x70Logo.scale-140.png
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-140.png
                                                        • Size 991B
                                                        • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        70x70Logo.scale-140_contrast-white.png
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-140_contrast-white.png
                                                        • Size 865B
                                                        • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        70x70Logo.scale-180.png
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-180.png
                                                        • Size 1KB
                                                        • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        70x70Logo.scale-180_contrast-white.png
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-180_contrast-white.png
                                                        • Size 1KB
                                                        • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        70x70Logo.scale-80.png
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-80.png
                                                        • Size 590B
                                                        • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        70x70Logo.scale-80_contrast-white.png
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-80_contrast-white.png
                                                        • Size 519B
                                                        • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        assistant_package
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\assistant_package
                                                        • Size 4.0MB
                                                        • SHA256 d3db6378085b6ce536c560d45b54375807da6bb4be4819e0125e7f54e943c673
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        d3dcompiler_47.dll
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\d3dcompiler_47.dll
                                                        • Size 4.5MB
                                                        • SHA256 3b42e20384e7d1515ec2fd7cfe82bb5f03cee0b9fab4cf39e912a56f39002c37
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        dxcompiler.dll
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\dxcompiler.dll
                                                        • Size 24.7MB
                                                        • SHA256 bdeca837a59d75f6d02b723ed9167a1359fa74fca0fd44a7e0982ea5f7ee8e61
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        dxil.dll
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\dxil.dll
                                                        • Size 1.4MB
                                                        • SHA256 ea56c20ead54660c7dfd844559de48708bc937c9283ef4fa3f33af871d02d734
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        files_list
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\files_list
                                                        • Size 6KB
                                                        • SHA256 a5bbae7f7160a98772a9d713ae501add9db6b80015bf11302d133c0052020290
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        headless_command_resources.pak
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\headless_command_resources.pak
                                                        • Size 3KB
                                                        • SHA256 7c71d88913a88c6d0006b684055f3d136782aa1f6866ecafe2096b8aeae2e418
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        icudtl.dat
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\icudtl.dat
                                                        • Size 10.4MB
                                                        • SHA256 113f7464a507af4f7d2b0ea73094217881386f19dac7cacc5f071e7a4cf04a20
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        installer.exe
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\installer.exe
                                                        • Size 8.4MB
                                                        • SHA256 df8f4c8801bbdfc47af42be6dc6cd649188cabb99b3b5b3a232a9eb3381d93fb
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        installer_helper_64.exe
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\installer_helper_64.exe
                                                        • Size 607KB
                                                        • SHA256 e3f94b159bd44a4272f46df048a368d949ef9e756e150c9213ef63763b9a2378
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        libEGL.dll
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\libEGL.dll
                                                        • Size 451KB
                                                        • SHA256 2f63ea3de4ad9e06b3cf6e5e9b2cc271f3ac52720c85ae8848bf55a8403e4743
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        libGLESv2.dll
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\libGLESv2.dll
                                                        • Size 451KB
                                                        • SHA256 3e7106cea7a667ec547a53e589e3a4558cc2e9f03ab3e4bee3e1712600fbf669
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        bg.pak
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\bg.pak
                                                        • Size 983KB
                                                        • SHA256 1dc471ddd2101d87e4e24882bdf678b255e6973fbc7d86f1bedf4ff2646fa503
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        bn.pak
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\bn.pak
                                                        • Size 1.2MB
                                                        • SHA256 0adbfc8c0aea9d072c502d6801a29829e62028f31595b7bd134e949e6825d72c
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        ca.pak
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\ca.pak
                                                        • Size 619KB
                                                        • SHA256 3f2e81140887b4c92ab2cacb287f1395364fcb698d9eb50e54f25f9137e6c8e2
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        cs.pak
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\cs.pak
                                                        • Size 620KB
                                                        • SHA256 0483fae37cde542b5011e5d26b1ca57f69f37ce9fa44ecd28a8e8e670ab0f712
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        da.pak
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\da.pak
                                                        • Size 569KB
                                                        • SHA256 1e68cd9d9988aefe17576f3c83f1543fa1ffcb972b22dfb1de1dcb2ab23ff423
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        de.pak
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\de.pak
                                                        • Size 617KB
                                                        • SHA256 a400a05615fc1c964b0f9c63de7c2321a03e919be7c7b22c61f545837b9ac756
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        el.pak
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\el.pak
                                                        • Size 1.0MB
                                                        • SHA256 5fc93d324372cf060857cf4a29bf31f689572914c92b24a8174a89a2c538115b
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        en-GB.pak
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\en-GB.pak
                                                        • Size 499KB
                                                        • SHA256 4c0eeb545466af9307b50c3cd8331532413f31b7bf7a359a9a6d31a6513ddc10
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        en-US.pak
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\en-US.pak
                                                        • Size 503KB
                                                        • SHA256 31d0d2140d3664754021877248cccf2ef54e4cd41bf8d98d00124e0111801142
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        installer_prefs.jsonc5e4d1a7-e0d0-4cf8-907c-dc741d9c20e1.tmp
                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.jsonc5e4d1a7-e0d0-4cf8-907c-dc741d9c20e1.tmp
                                                        • Size 1KB
                                                        • SHA256 68b7cd0202f39368562a0729f4415c899f5baadaa8cd50dd08c316422b244ca9
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Opera Browser.lnk
                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\opera_package_202610270002241\Opera Browser.lnk
                                                        • Size 1KB
                                                        • SHA256 7f535ea95b246460f28f62265fc76e922344b7248ff524464e83840559a369ce
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        additional_file0.tmp
                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\opera_package_202610270002241\additional_file0.tmp
                                                        • Size 2.9MB
                                                        • SHA256 30786977e61add36f7c641facfb7fce1b2ec7c2a0a7e055a172f127a68788556
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        assistant_installer.exe
                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\opera_package_202610270002241\assistant\assistant_installer.exe
                                                        • Size 2.4MB
                                                        • SHA256 e8dce277d6edb918499526fadba9902e317496c2af077219f263a7a643467824
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        dbgcore.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\opera_package_202610270002241\assistant\dbgcore.dll
                                                        • Size 196KB
                                                        • SHA256 c16220edd3787da33dbd3ac2fcbec7de6a13e2baf14ae6105bba68d4efd83628
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        dbghelp.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\opera_package_202610270002241\assistant\dbghelp.dll
                                                        • Size 1.8MB
                                                        • SHA256 990b13e88b4a9985eb5c596078e2ec26a0edcc22169dd71f8a84c7943005306c
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\opera_package_202610270002241\de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                        • Size 3.5MB
                                                        • SHA256 9d645b0ce032688d4f3100cd1f1d178d3c2c9d04bb691144659b98b4931d8eef
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        installer_prefs_include.json
                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\opera_package_202610270002241\installer_prefs_include.json
                                                        • Size 228B
                                                        • SHA256 fb510f9f3decb14b00aa8a87149dbbdd4286ee684cce0fab0c996d15aa67d4a6
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        installer_prefs_include.json7579f5fc-a338-4119-86b2-31d78cd3b185.tmp
                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\opera_package_202610270002241\installer_prefs_include.json7579f5fc-a338-4119-86b2-31d78cd3b185.tmp
                                                        • Size 243B
                                                        • SHA256 bb34cce4e4c695d363965ea84f9ddc9cb30ce8ee95bcef6140f159be43969430
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        installer_prefs_include.json8c047a00-665b-4cd4-a77e-248f49a84279.tmp
                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\a7e04c64-a3fc-452b-bee4-870513c258ca Opera Installer Temp\opera_package_202610270002241\installer_prefs_include.json8c047a00-665b-4cd4-a77e-248f49a84279.tmp
                                                        • Size 1KB
                                                        • SHA256 0b27aac65e5be2c49c3b2e3eef52235f7ac19683add46d868dde915755aa07ee
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        installer.exe
                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zSCF7C9E49\installer.exe
                                                        • Size 8.4MB
                                                        • SHA256 69ba0516f53a270d75435b2dcb059a77ea2e0dec2eaacff7c227c88efb694750
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        OpInst.exe
                                                        • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                                        • Size 3.1MB
                                                        • SHA256 d4c13ee6a8458cfa846fd5fcda647447c238388119cbe32aa387def55699cc76
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        a2e9e917-3762-4e8d-a8ff-faf7d839e303.tmp
                                                        • Path C:\Users\Admin\AppData\Local\Temp\a2e9e917-3762-4e8d-a8ff-faf7d839e303.tmp
                                                        • Size 3.0MB
                                                        • SHA256 5c8953fdd4f8a848a8711f749b4bf85376836da9a065b7bdd887e5d03f44cfd8
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        bb83c88b-330c-4d5d-b862-0e5148c84dac.tmp
                                                        • Path C:\Users\Admin\AppData\Local\Temp\bb83c88b-330c-4d5d-b862-0e5148c84dac.tmp
                                                        • Size 14KB
                                                        • SHA256 99dfb50b062db90ac585e2a877192973b88522ceb257a78345f1f1ca5da98e1b
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        bg.png
                                                        • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                                        • Size 224KB
                                                        • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        favicon_opera_one.png
                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3944_757078683\CRX_INSTALL\favicon_opera_one.png
                                                        • Size 2KB
                                                        • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        logo_128.png
                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir992_1614295722\CRX_INSTALL\public\icons\logo_128.png
                                                        • Size 7KB
                                                        • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        logo_16.png
                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir992_1614295722\CRX_INSTALL\public\icons\logo_16.png
                                                        • Size 653B
                                                        • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        logo_32.png
                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir992_1614295722\CRX_INSTALL\public\icons\logo_32.png
                                                        • Size 1KB
                                                        • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        logo_48.png
                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir992_1614295722\CRX_INSTALL\public\icons\logo_48.png
                                                        • Size 2KB
                                                        • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        logo_64.png
                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir992_1614295722\CRX_INSTALL\public\icons\logo_64.png
                                                        • Size 2KB
                                                        • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        manifest.json
                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir992_1883577237\CRX_INSTALL\manifest.json
                                                        • Size 1KB
                                                        • SHA256 a2829f3f71f076f86b10bf610d9d35c45d8b653ab501c9cc5d7fe4634cbf4f9a
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        messages.json
                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir992_263092221\CRX_INSTALL\_locales\en\messages.json
                                                        • Size 396B
                                                        • SHA256 1bcb4888a65788a50ed88f4bd95955d1dafdc950b5ef4609b37f42934a4bf3b9
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Icon_Light_Neutral.png
                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir992_263092221\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                        • Size 2KB
                                                        • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Icon_Light_Neutral.png
                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir992_263092221\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
                                                        • Size 962B
                                                        • SHA256 e8adb8a9dcca121a1853749ebef122b84a995ebf8775cd27b0dd54bab9840bd1
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        main.js
                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir992_953458420\CRX_INSTALL\main.js
                                                        • Size 48KB
                                                        • SHA256 c2d961a8340848930aa0b7141ec03b973639d119756904d35fc8efe1a4cb8ec7
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        messages.json
                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir992_978384847\CRX_INSTALL\_locales\de\messages.json
                                                        • Size 395B
                                                        • SHA256 7f068365742c910bd20d60741e89473e3b422ca92776fcfe7db1529bdfcb3efa
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        messages.json
                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir992_978384847\CRX_INSTALL\_locales\es\messages.json
                                                        • Size 398B
                                                        • SHA256 d2c36a6b4b6535152df5adba5c9d85c45ea6898a1b170a4f795c228931cacc5b
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        messages.json
                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir992_978384847\CRX_INSTALL\_locales\pl\messages.json
                                                        • Size 401B
                                                        • SHA256 c6e32b74d1b21921946f59b9a12cc7b24086e876608d3db3f29628c35b35dbee
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        messages.json
                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir992_978384847\CRX_INSTALL\_locales\ru\messages.json
                                                        • Size 463B
                                                        • SHA256 5f08e78f50623ca8140af8d02eb7fd7e56ff8e9538e4449f7ee327a7b2ef292d
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        messages.json
                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir992_978384847\CRX_INSTALL\_locales\uk\messages.json
                                                        • Size 410B
                                                        • SHA256 95ef7c34001a60c39cc5fb3516081ff901bb65a08db6ed00acd70afb48858675
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Icon_Light_Active.png
                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir992_978384847\CRX_INSTALL\icons\128\Icon_Light_Active.png
                                                        • Size 2KB
                                                        • SHA256 97d9553a4f725354a6d5c3eff11f31285fd89c3b150593f04785b83d0a56efc2
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Icon_Light_Available_Red.png
                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir992_978384847\CRX_INSTALL\icons\128\Icon_Light_Available_Red.png
                                                        • Size 2KB
                                                        • SHA256 9eccebdbdb61efc0cbd8bccf3a5fedc6f9a1ebe5084b160783f90a56cd1efa7b
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Icon_Light_Available_Yellow.png
                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir992_978384847\CRX_INSTALL\icons\128\Icon_Light_Available_Yellow.png
                                                        • Size 2KB
                                                        • SHA256 c165ef60bf3806cd0a7121a8d6cfd06909fc84b38a07d43e809bd7bff564099c
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        manifest.json
                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir992_978384847\CRX_INSTALL\manifest.json
                                                        • Size 1KB
                                                        • SHA256 28fe81416b71c3f1f2ccd27abf21410d83a18b3845f2c31c45c6d21c0e8bf583
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        manifest.json
                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir992_978384847\CRX_INSTALL\manifest.json
                                                        • Size 1KB
                                                        • SHA256 54a218f04a2f504690e6c61ed8ccb7345e128fcadd4fc2b6031966a43bd445f3
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        rules.json
                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir992_978384847\CRX_INSTALL\rules.json
                                                        • Size 839B
                                                        • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        settings.dat
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                        • Size 40B
                                                        • SHA256 849ed4a311c457ab560f29e830c4a150753f831eca1eed310bc9a35ced7f6f26
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        BookmarkMergedSurfaceOrdering44acba7e-8f01-403f-9392-57d645283189.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarkMergedSurfaceOrdering44acba7e-8f01-403f-9392-57d645283189.tmp
                                                        • Size 6B
                                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        Bookmarks36f44b97-5d3c-41e1-b3e1-98f9cb849434.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks36f44b97-5d3c-41e1-b3e1-98f9cb849434.tmp
                                                        • Size 33KB
                                                        • SHA256 59fa648c7ffd2099c1c9f4d3d00187dbbb2f708bcbbc2bd0c0d616af988fba96
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        BookmarksExtrasc962d4e1-d3d6-4709-9b24-7455101ee392.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtrasc962d4e1-d3d6-4709-9b24-7455101ee392.tmp
                                                        • Size 223KB
                                                        • SHA256 8ec7a056aaf7acc36eeeaad2c563f129dfe4a68e7d913f8d526677d764abaff8
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        temp-index
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
                                                        • Size 336B
                                                        • SHA256 decea115dd2e3c2950dbaceefe7774f26144c5d297004a11888e8f59b21b2370
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        temp-index
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
                                                        • Size 1KB
                                                        • SHA256 98329e5c60f643fd7e6d8a8eba818e5cf0c57c9d87abb76620af40533eff3ec4
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        the-real-index
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\wasm\index-dir\the-real-index
                                                        • Size 48B
                                                        • SHA256 9c35b23d63d8c4720b314e6be1d53661f5fe92dfb21e17567e78d90e768ef86c
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        data_0
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_0
                                                        • Size 8KB
                                                        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                        • MD5 SHA1 SHA512 SSDEEP
                                                        Submit Download

                                                        data_2
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_2
                                                        • Size 8KB
                                                        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                        • MD5 SHA1 SHA512 SSDEEP
                                                        Submit Download

                                                        data_3
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_3
                                                        • Size 8KB
                                                        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                        • MD5 SHA1 SHA512 SSDEEP
                                                        Submit Download

                                                        manifest.json
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.9_0\manifest.json
                                                        • Size 1KB
                                                        • SHA256 8b3312d3adb43c2f1b3e88d0941c8c0edbf038f9056a734f8b1495a1b1d1a51a
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        computed_hashes.json
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.9_1\_metadata\computed_hashes.json
                                                        • Size 694B
                                                        • SHA256 29feaf265f7d3fc020c7829104680a6a80b31d8fef266fe537d75be6e1bd91dd
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        verified_contents.json
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.9_1\_metadata\verified_contents.json
                                                        • Size 1KB
                                                        • SHA256 2da5576dbe6f83e339e733336ff13c91c01cb3440dcdedda455f554b8e7ddfd3
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        scraping-method-Dq4mm50p.js
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\scraping-method-Dq4mm50p.js
                                                        • Size 6KB
                                                        • SHA256 99c8d4f76ebc9fc6cea115065570a12d41903c93e18c1c6385b5b2e70256eb70
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        service-worker.ts-fle0M1Xd.js
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\service-worker.ts-fle0M1Xd.js
                                                        • Size 13KB
                                                        • SHA256 4ebb6cb9c3f033302d6a8c31329009082bafeab73c39cca179511b5a972ba8f8
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        service-worker-loader.js
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\service-worker-loader.js
                                                        • Size 49B
                                                        • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        favicon_opera_one.png
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\favicon_opera_one.png
                                                        • Size 2KB
                                                        • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        reader_mode.js
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\reader_mode.js
                                                        • Size 112KB
                                                        • SHA256 ebb002d9d7d9206bc39d3f44bae6e49b7d694a172a0b1da9934f49c17f433084
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        spotify_frame_interceptor.js
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\spotify_frame_interceptor.js
                                                        • Size 5KB
                                                        • SHA256 f25cc540e5212f9f327bfb16702e156d385aa2545bd1b4c572f6a5543d4e7930
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        messages.json
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\_locales\en\messages.json
                                                        • Size 429B
                                                        • SHA256 c6a7161359e3c4fbc4059b7209c585f9aa2306c08e6c39a3003f4b29f2ceb22d
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        background.js
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\background.js
                                                        • Size 105KB
                                                        • SHA256 9a9b0f7b3070d6f47773e487ebf53134c7629c15c4564ca613c3c9a8077b543d
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        content.js.LICENSE.txt
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\content.js.LICENSE.txt
                                                        • Size 1KB
                                                        • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Icon_Light_Neutral.png
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\128\Icon_Light_Neutral.png
                                                        • Size 2KB
                                                        • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Icon_Dark_Active.png
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\32\Icon_Dark_Active.png
                                                        • Size 883B
                                                        • SHA256 50aa1dcfa9083b57dd6187752b2c149294210be12d263b793d27daf8d431954c
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Icon_Dark_Available_Red.png
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\32\Icon_Dark_Available_Red.png
                                                        • Size 895B
                                                        • SHA256 2278e95b28851ade57217ab5c7b32598c44e1085693a3e26379643d29fa0a6d1
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Icon_Light_Available_Yellow.png
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\32\Icon_Light_Available_Yellow.png
                                                        • Size 895B
                                                        • SHA256 726a50a9c008449ab7bafbf21325bfc72093b7ae6a56c5be90cf8c32a8a44641
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Icon_Light_Neutral.png
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\32\Icon_Light_Neutral.png
                                                        • Size 932B
                                                        • SHA256 b8e92f9e9b9dc82799231b8d1b57091a9d0bcdd9b54615f86e8c4e4e5c9f036b
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        index.html
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\index.html
                                                        • Size 222B
                                                        • SHA256 fd21c7ca4637b0221250a14b9fcfb6ebc3b734e659ad80151be4bc579db818f1
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        messages.json
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\_locales\de\messages.json
                                                        • Size 428B
                                                        • SHA256 e32c4c5ba04741c692aba1bc420b8a0f9ebddbec47a095b26626fb4ca299e9fd
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        messages.json
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\_locales\es-mx\messages.json
                                                        • Size 389B
                                                        • SHA256 1a5875ab54054c7428fe3ff69f621d5a563a2a7e0b06c4023d734f916ff80891
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        messages.json
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\_locales\es\messages.json
                                                        • Size 431B
                                                        • SHA256 3efb81c6c075cb9477cde6823496bc4a83f4be1b3365541a76598522987065a3
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        messages.json
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\_locales\pl\messages.json
                                                        • Size 434B
                                                        • SHA256 a9bb777e5888034a9fe2f12c1e1d259f47e2f5f3f3df22e198733825b369b4ea
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        messages.json
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\_locales\pt-br\messages.json
                                                        • Size 389B
                                                        • SHA256 340966feb56d36c6564a964fbf8718c1f771d0abb40a8c3db95402f11e71a4e2
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        messages.json
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\_locales\ru\messages.json
                                                        • Size 496B
                                                        • SHA256 7b548cf699eca1f64491af66d591a3032f1c101b5c9ece9991afd9e0bfbbbb9c
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        messages.json
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\_locales\uk\messages.json
                                                        • Size 443B
                                                        • SHA256 370df5d3f43ebb04a413cb095d49eec44067c7e53c62cc3721fe105b3ba829ca
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        computed_hashes.json
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\_metadata\computed_hashes.json
                                                        • Size 81KB
                                                        • SHA256 1cb68fd2b11be52ddf8da4e36c6a9308ecdaaccd7da78b91986ea31fe1a925eb
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        _ruleset1
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\_metadata\generated_indexed_rulesets\_ruleset1
                                                        • Size 987B
                                                        • SHA256 87e9f607b1b2638272f2d825615e33512be1eb9ca28e257950f071ca55772e26
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        verified_contents.json
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\_metadata\verified_contents.json
                                                        • Size 6KB
                                                        • SHA256 c78e15f31b9111bacda0b129f2941ea4f9bd480c1bfdf08c1cda5db108192777
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        background.js.LICENSE.txt
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\background.js.LICENSE.txt
                                                        • Size 385B
                                                        • SHA256 c61563a5f5ee84a023c9275397e24c8b8a33eb1e52a9edaf7e8c98571c076c59
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        content.js
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\content.js
                                                        • Size 2.1MB
                                                        • SHA256 52d7d36fbb0c25cb80c120f7a904d667fb8056ea4e573a207750f34889ae164c
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        content_getdify.js
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\content_getdify.js
                                                        • Size 19KB
                                                        • SHA256 290496d9ea2806f9439b38d68df86e75221eaede25a16efb305b3e5689077e72
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        content_getdify.js.LICENSE.txt
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\content_getdify.js.LICENSE.txt
                                                        • Size 149B
                                                        • SHA256 cdf963ced7d25a0f98901a547647b4d6e2dbe0197fd78c87a059a87b0e542fe2
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Icon_Dark_Neutral.png
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\icons\128\Icon_Dark_Neutral.png
                                                        • Size 2KB
                                                        • SHA256 8acb2d44490a29c14bea94c1ca4442c4b89150f8c8bc7af090c32ce136ca4bf1
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Icon_Dark_Neutral.png
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\icons\32\Icon_Dark_Neutral.png
                                                        • Size 849B
                                                        • SHA256 52dba611cdee4791ac34f18e0e0af3235355c805401e9c598225c16ed8c5536a
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        popup.js
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\popup.js
                                                        • Size 1.8MB
                                                        • SHA256 2d7e206a838287d747523624eb57e4af3ad3f422e71b1c9c7adec33202a89282
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        window.html
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\window.html
                                                        • Size 223B
                                                        • SHA256 48ead89755412349d4d261b8fd347282e52c1cdbffce846fa674d28a58ba3c35
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        window.js
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_1\window.js
                                                        • Size 2.7MB
                                                        • SHA256 4d42c8930e50268026ccb51a4649413fbe0c672a490755fd828f13959ccd57ac
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        081ce537-53d4-4a35-acc7-bb2fc1e89cc2.tmpf3971354-4bde-4c33-aa3d-f968e5f26ddf.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\081ce537-53d4-4a35-acc7-bb2fc1e89cc2.tmpf3971354-4bde-4c33-aa3d-f968e5f26ddf.tmp
                                                        • Size 27KB
                                                        • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        1e9a1a2e-0c85-4486-a942-ec79d08c7831.tmp364a0ba8-4f37-4c7b-ba79-9766eb86085b.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\1e9a1a2e-0c85-4486-a942-ec79d08c7831.tmp364a0ba8-4f37-4c7b-ba79-9766eb86085b.tmp
                                                        • Size 27KB
                                                        • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        4661cf76-1108-48d2-bc6a-70791387ec64.tmp59518dac-6581-49f9-91c3-754dc11bf736.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\4661cf76-1108-48d2-bc6a-70791387ec64.tmp59518dac-6581-49f9-91c3-754dc11bf736.tmp
                                                        • Size 27KB
                                                        • SHA256 db83741aada0665e563ed2965b9f1787d9503733f407658b5bd72a46e3b6e91d
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        c277100c-f53a-4553-85fa-a9fd91e0acf6.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\c277100c-f53a-4553-85fa-a9fd91e0acf6.tmp
                                                        • Size 27KB
                                                        • SHA256 f79057f51183f6efa9c93c2a864f9a4165992119cf38c938cff219619aefe2d2
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        e29da159-8ea4-4c9e-a485-0f8e04c1889e.tmp94b6cb14-1d93-4b7f-a267-d1442556e17b.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\e29da159-8ea4-4c9e-a485-0f8e04c1889e.tmp94b6cb14-1d93-4b7f-a267-d1442556e17b.tmp
                                                        • Size 27KB
                                                        • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        fb449204-4c35-44bb-a9fe-f202959b2dcf.tmp1aa6efea-cf3d-4075-85aa-341879e87a62.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\fb449204-4c35-44bb-a9fe-f202959b2dcf.tmp1aa6efea-cf3d-4075-85aa-341879e87a62.tmp
                                                        • Size 27KB
                                                        • SHA256 24683ea67b7b390d33c1d607fc44a309989ada5a9fa5fb4ec96a96fda96d44ff
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Network Persistent Statefb6fc54d-6253-4167-9007-4b8b45ce9734.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent Statefb6fc54d-6253-4167-9007-4b8b45ce9734.tmp
                                                        • Size 965B
                                                        • SHA256 b35f3143739e16860e74c69480bf011799d947038a5ea0d7f7dead7ec2977b3c
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        SCT Auditing Pending Reports
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\SCT Auditing Pending Reports
                                                        • Size 2B
                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        Preferences2439e4ae-b80e-4ec6-8587-67e6d7dcccdc.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences2439e4ae-b80e-4ec6-8587-67e6d7dcccdc.tmp
                                                        • Size 15KB
                                                        • SHA256 5fef3563bfba72e52a31159baeb03565783cd1c3e2ac6b89c8529b4bc194a931
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Preferences5baa7fa5-5d59-4fd3-adce-8cb36e2bb00b.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences5baa7fa5-5d59-4fd3-adce-8cb36e2bb00b.tmp
                                                        • Size 15KB
                                                        • SHA256 79057f6762d59fe296f7865c82a1d4215e8f4a4f4cb60e5e86e8254370518a62
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Preferences5be9f4df-dc27-4da5-b925-406b5ebc1987.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences5be9f4df-dc27-4da5-b925-406b5ebc1987.tmp
                                                        • Size 10KB
                                                        • SHA256 5e4ff206a3ac7d8359a2e339d14285ddf07a2bad2df800fac6ad415d9a2a743b
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Preferencesc0b2b35a-7d11-446c-aaa2-03947d9e050e.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferencesc0b2b35a-7d11-446c-aaa2-03947d9e050e.tmp
                                                        • Size 15KB
                                                        • SHA256 b33d39af02676b31ef7f612932c4b828c33f4c75ea18bbe7a9aa8d40e4338dd2
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Preferencesc5f198bb-4c39-467c-ab1d-6b6010d5817c.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferencesc5f198bb-4c39-467c-ab1d-6b6010d5817c.tmp
                                                        • Size 15KB
                                                        • SHA256 c0afcd048bbc366f91ae80fc14af6616951722bd8dc0888040f84dabb23affa3
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Secure Preferences371ef136-cade-40e6-9c01-a614c6c5ad87.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences371ef136-cade-40e6-9c01-a614c6c5ad87.tmp
                                                        • Size 82KB
                                                        • SHA256 7df6478ef9082a4005787cc12fea168e5c8a3d08d7e426e7ba3873aebebcf306
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Secure Preferencesd1ca6165-35ae-46b2-9940-197b15e4014f.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferencesd1ca6165-35ae-46b2-9940-197b15e4014f.tmp
                                                        • Size 112KB
                                                        • SHA256 352368ccbafa5b1efc5eb55fb57608adfbd32d7c64ec43158febf07bbbaefb2f
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        temp-index
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                        • Size 456B
                                                        • SHA256 c1390287a09cd0fdd46b89413657faf0685989c650aeb51d6ff3cf3ef28e7cee
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        temp-index
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                        • Size 456B
                                                        • SHA256 f328e60b066866f1a4b17336268eaf828492431dbb6c8f3f9aebf56fc2086aa0
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        temp-index
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                        • Size 96B
                                                        • SHA256 4ec1a55dcd788bfc7e08130a9669295ec8dd5f986287f87520fccce7d1da6e01
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        the-real-index
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                        • Size 72B
                                                        • SHA256 7ba4156c89d0dc8e764b3e79467a733244061c1a8854de81621a526555759a84
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        index
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Shared Dictionary\cache\index
                                                        • Size 24B
                                                        • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        CURRENT
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Site Characteristics Database\CURRENT
                                                        • Size 16B
                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        session_5dfec102-d229-4f06-920c-b4050992bc64.raw
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5dfec102-d229-4f06-920c-b4050992bc64.raw
                                                        • Size 381B
                                                        • SHA256 1299483a9408af8161189c6edea3e7b3e137f898f0e931326c4185ede23263a6
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_5dfec102-d229-4f06-920c-b4050992bc64.raw01fea1ae-67d5-4dba-b5d1-ca551c842423.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5dfec102-d229-4f06-920c-b4050992bc64.raw01fea1ae-67d5-4dba-b5d1-ca551c842423.tmp
                                                        • Size 941B
                                                        • SHA256 18a8f2ecfb0416ba74eb101e5b495af4f472b749a02760f1a18780bac8a6e554
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_5dfec102-d229-4f06-920c-b4050992bc64.raw1d38123b-f213-4389-8c24-861de414eef7.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5dfec102-d229-4f06-920c-b4050992bc64.raw1d38123b-f213-4389-8c24-861de414eef7.tmp
                                                        • Size 605B
                                                        • SHA256 4eaf4efac549200c7931eeee4329dd5d865451996e171a73e957b8af9e2fa7e7
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_5dfec102-d229-4f06-920c-b4050992bc64.raw2994141d-b479-408c-87d3-7500e5fcff77.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5dfec102-d229-4f06-920c-b4050992bc64.raw2994141d-b479-408c-87d3-7500e5fcff77.tmp
                                                        • Size 1KB
                                                        • SHA256 31b4c6266cf77ff221c9fb3aded0ad0035a0fc5148200c48dad1cd54205d74cc
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_5dfec102-d229-4f06-920c-b4050992bc64.raw6aebf23b-4f93-4ecb-8035-c7154123cc9f.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5dfec102-d229-4f06-920c-b4050992bc64.raw6aebf23b-4f93-4ecb-8035-c7154123cc9f.tmp
                                                        • Size 1KB
                                                        • SHA256 d8db978b0c9574b492787c8d2c078b4f75d9997635e417f8026133b26b466c79
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_5dfec102-d229-4f06-920c-b4050992bc64.raw9c60007e-f3db-4f62-bb5e-76ed448ffc92.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5dfec102-d229-4f06-920c-b4050992bc64.raw9c60007e-f3db-4f62-bb5e-76ed448ffc92.tmp
                                                        • Size 1KB
                                                        • SHA256 4d72cc0642b1b48cf2b27de093cc33c14de62583faae18b9910e5e193036ec4c
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_5dfec102-d229-4f06-920c-b4050992bc64.rawb968625f-523b-444f-a4af-3a51da779448.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5dfec102-d229-4f06-920c-b4050992bc64.rawb968625f-523b-444f-a4af-3a51da779448.tmp
                                                        • Size 1KB
                                                        • SHA256 1c743dbd40db697cd4c8f2729c6185eaa088e7c01fb2376709afd571737dfa65
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_5dfec102-d229-4f06-920c-b4050992bc64.rawbd7fc78c-eacd-4e3a-8286-9775e3980ba3.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5dfec102-d229-4f06-920c-b4050992bc64.rawbd7fc78c-eacd-4e3a-8286-9775e3980ba3.tmp
                                                        • Size 493B
                                                        • SHA256 5777203024f9f7842b9f36d3fa8b526211570af83e6e47191bbc15b63c07e3a2
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_5dfec102-d229-4f06-920c-b4050992bc64.rawdce0b4d4-48c5-4718-8202-9db4df6f233e.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5dfec102-d229-4f06-920c-b4050992bc64.rawdce0b4d4-48c5-4718-8202-9db4df6f233e.tmp
                                                        • Size 1KB
                                                        • SHA256 5f52611131b10ed8fb182053bb73eb8a52d579a28c80873736b215ae62269a7d
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_5dfec102-d229-4f06-920c-b4050992bc64.rawe53439d2-a5de-448d-9c23-7dc313295a85.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5dfec102-d229-4f06-920c-b4050992bc64.rawe53439d2-a5de-448d-9c23-7dc313295a85.tmp
                                                        • Size 1KB
                                                        • SHA256 443cd2693a47ac4fd8645e30a995dad07e8f31a93d30e50f3522f5e051bc9e8d
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_5dfec102-d229-4f06-920c-b4050992bc64.rawebf399c0-c3ff-4040-90e8-568bbf2975e0.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5dfec102-d229-4f06-920c-b4050992bc64.rawebf399c0-c3ff-4040-90e8-568bbf2975e0.tmp
                                                        • Size 1KB
                                                        • SHA256 f81e5cdebd576c19def29de472e8208afefbd67b198804ae472f55f7497d71e4
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_5dfec102-d229-4f06-920c-b4050992bc64.rawf9606bb6-87bb-4f4c-8bac-1ebff6f5d0ff.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5dfec102-d229-4f06-920c-b4050992bc64.rawf9606bb6-87bb-4f4c-8bac-1ebff6f5d0ff.tmp
                                                        • Size 1KB
                                                        • SHA256 e196a66d16cab2428078a3c8c0d00641dbf0ed494dea416f756db4f37c7b047b
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_5dfec102-d229-4f06-920c-b4050992bc64.rawfed80671-ea2a-40f9-82c5-e1bb317927b9.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5dfec102-d229-4f06-920c-b4050992bc64.rawfed80671-ea2a-40f9-82c5-e1bb317927b9.tmp
                                                        • Size 781B
                                                        • SHA256 00c9a46ebdd90423a69bfdfe36d91a64c18b93be0771fa75bc74c624128546f7
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw
                                                        • Size 381B
                                                        • SHA256 15bab976342108d9a2fd71a46ea6b381887a9209c5aaeb0e3bdcced07cf69611
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw0a462c33-43bd-4f26-aefd-b8ed7570bc9e.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw0a462c33-43bd-4f26-aefd-b8ed7570bc9e.tmp
                                                        • Size 1KB
                                                        • SHA256 6382e18c8a6d50d869e63f4220b4b08209fc888e2608f7ef8cd696e03b4e6696
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw10d5b9ab-2dc4-4457-8678-2e122d1e06b7.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw10d5b9ab-2dc4-4457-8678-2e122d1e06b7.tmp
                                                        • Size 6KB
                                                        • SHA256 791b16f0bf7394e3b491ae8e88958e5f473296ece123779364e392ebcb5eaf04
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw12683448-56e6-4d05-9384-f20de917d5dc.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw12683448-56e6-4d05-9384-f20de917d5dc.tmp
                                                        • Size 6KB
                                                        • SHA256 c6f9c1f299a8680ccb21b599646f87a223eccbfcce48310c5fed86604e79e61f
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw192dd261-ca61-4384-88e8-127534169b4a.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw192dd261-ca61-4384-88e8-127534169b4a.tmp
                                                        • Size 9KB
                                                        • SHA256 4f2b5f40d5f4e86b4735f5fb4a963a3f94342b7701f64887f62aeb45d5f03942
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw19b66a94-5bfd-4a91-8465-3104e148f784.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw19b66a94-5bfd-4a91-8465-3104e148f784.tmp
                                                        • Size 9KB
                                                        • SHA256 652a92ed0291b31e53c804641b987606807192fd9926a9e26703f675265cc7d4
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw1b154433-99ba-477e-9671-a2c4efab941a.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw1b154433-99ba-477e-9671-a2c4efab941a.tmp
                                                        • Size 8KB
                                                        • SHA256 552dddf53f38f868b4f6cd244301a60d0314be92c0e850ed954e2b777d0fbdcf
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw205f0752-68ae-40f8-b0f9-fc7e5a713485.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw205f0752-68ae-40f8-b0f9-fc7e5a713485.tmp
                                                        • Size 1KB
                                                        • SHA256 2ab6634d3191f6bdfca11d490263f7bc7575d7eb3c006841fb17bda2a7faa46a
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw207c8a4f-9238-44e1-80ff-53803bdd5e26.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw207c8a4f-9238-44e1-80ff-53803bdd5e26.tmp
                                                        • Size 6KB
                                                        • SHA256 4da0035f42c1d29d2debf1465e89b845fe8d2632955844ab2c46515a9a153c05
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw21f15d08-3775-46d4-bdb2-d7ca366fa899.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw21f15d08-3775-46d4-bdb2-d7ca366fa899.tmp
                                                        • Size 8KB
                                                        • SHA256 851865a308d60a3885ed0200bd37962c2e65cab13bbe682ba09277d3790297ed
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw24503bd1-4f8e-45f7-af46-577ea525bb34.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw24503bd1-4f8e-45f7-af46-577ea525bb34.tmp
                                                        • Size 7KB
                                                        • SHA256 a0dd7052bb1a6515241a2359dbe2232d3660eb16677a7e1bb626de01fcdd8551
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw27d1799a-cfa6-4e18-ab8b-3fcca1fe5be5.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw27d1799a-cfa6-4e18-ab8b-3fcca1fe5be5.tmp
                                                        • Size 9KB
                                                        • SHA256 6543181c9c009c1ed4238ebefde203115aaf56583f66ba63a0407e8c621d3f3a
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw2c1d4ae1-d1df-44d5-bdb4-00d154d52e78.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw2c1d4ae1-d1df-44d5-bdb4-00d154d52e78.tmp
                                                        • Size 1KB
                                                        • SHA256 ef5fb68ced9783428e40e24cc52ee58a65a9fb8367cedff65205f58f5fa70e98
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw2ebebc94-333b-4795-b361-b9af13947d4a.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw2ebebc94-333b-4795-b361-b9af13947d4a.tmp
                                                        • Size 10KB
                                                        • SHA256 e4bc2089cadd4705621f50589d4b403e642f39a38bcb1ba91a556bf732da7b23
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw35635716-b3b9-4da2-ac45-ea808ccd45fc.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw35635716-b3b9-4da2-ac45-ea808ccd45fc.tmp
                                                        • Size 10KB
                                                        • SHA256 c3528cd02cb16d5b441940eb7760c1fc098c241c747701f3086dc9dd2f4f4e25
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw3c68508f-72a4-4b3b-b300-36f09acf16a4.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw3c68508f-72a4-4b3b-b300-36f09acf16a4.tmp
                                                        • Size 8KB
                                                        • SHA256 ca3f954f052397945fdb1327c1c46b0af36680b94c21e4e54926843110317b54
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw3e05afee-762a-4f8e-a05f-216883fda5df.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw3e05afee-762a-4f8e-a05f-216883fda5df.tmp
                                                        • Size 9KB
                                                        • SHA256 4aeebcedbce7b97b1b54170536a0b8073a080612c792d928bb234c03c93f3a05
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw43e23848-88be-4d04-945f-94659634531c.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw43e23848-88be-4d04-945f-94659634531c.tmp
                                                        • Size 9KB
                                                        • SHA256 1acbd2f855ed1ef0a4fe202a88bde06449b3da602bf1b89dbb7823f30eae9fe8
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw44d60e0d-c169-4084-8116-6d762551fa10.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw44d60e0d-c169-4084-8116-6d762551fa10.tmp
                                                        • Size 1KB
                                                        • SHA256 aa45bfa5626e775c6fa7edfa0457d171bedcc575e57a8aa1b8972a4f6c648f8c
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw47de8595-a1a3-479a-89ca-1fc8b8a9533e.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw47de8595-a1a3-479a-89ca-1fc8b8a9533e.tmp
                                                        • Size 1KB
                                                        • SHA256 f9bcb5b843ab1d774ec8bf1098b074ea1e651ada7fbf32c8576c033eacbe13bf
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw4ff95c96-641b-4681-af9a-8ca3f388a8e0.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw4ff95c96-641b-4681-af9a-8ca3f388a8e0.tmp
                                                        • Size 9KB
                                                        • SHA256 54fec184cee5bca1109ce72e7c2ac5b0c1b807495a830bc28a9fd26960fe56df
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw5231c02e-ff02-4aba-ad6e-464f189b8a49.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw5231c02e-ff02-4aba-ad6e-464f189b8a49.tmp
                                                        • Size 8KB
                                                        • SHA256 d893f6ebd827d615b66d1424dbcce8b1a893f1778b4638015c5572be40f19249
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw6248b4e1-415d-440f-a28b-a1bc850acd23.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw6248b4e1-415d-440f-a28b-a1bc850acd23.tmp
                                                        • Size 8KB
                                                        • SHA256 d15af881caa5610e60eda40c8c6336430d1ba0a988b60d5fa51422472e107378
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw6355959b-c9da-4622-b0ef-4f99283fade1.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw6355959b-c9da-4622-b0ef-4f99283fade1.tmp
                                                        • Size 8KB
                                                        • SHA256 3a7440fc908e8a14fd8ac24b7ae284374697668022148f9d3d46465177b8db61
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw66679f96-dca2-4ed7-8ed3-ef9ca0f765b0.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw66679f96-dca2-4ed7-8ed3-ef9ca0f765b0.tmp
                                                        • Size 9KB
                                                        • SHA256 d6295ccb616e2aa6a05c1ac8bb072cac6e2ddd98608fb627fcd86288a41f311d
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw6a616899-af47-4b5b-99d4-227fd8c19a86.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw6a616899-af47-4b5b-99d4-227fd8c19a86.tmp
                                                        • Size 9KB
                                                        • SHA256 91e877773f2e2d28865edeb9944343adfd9e676b51a2a35140fafb97f37af9d8
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw7242ed4a-593a-451e-97e8-9e2f43f18703.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw7242ed4a-593a-451e-97e8-9e2f43f18703.tmp
                                                        • Size 10KB
                                                        • SHA256 91e1a258819865f2a621a2a6e9b80654f560d63582b901456bcd2cea6a363b20
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw7812db52-842c-4b0c-afa4-021b23a7f74b.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw7812db52-842c-4b0c-afa4-021b23a7f74b.tmp
                                                        • Size 10KB
                                                        • SHA256 64f71e8555655f426d7e59e1986d072ab862dd56afcacd5f071950f4585c2687
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw885c1d4e-0922-41e8-951a-110fba2d1538.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw885c1d4e-0922-41e8-951a-110fba2d1538.tmp
                                                        • Size 11KB
                                                        • SHA256 305c1a805abe7bafa0d36d57c9563c4cfc435b6e740ed46ef3806b4300c026f0
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw88a141a0-279c-4b47-b849-dc374273e579.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw88a141a0-279c-4b47-b849-dc374273e579.tmp
                                                        • Size 8KB
                                                        • SHA256 16e8389e4fd9811d0da612101f0be2ffab84524ca40ad67c76590b9de48708eb
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw897bc980-de36-448a-ba10-6d86047629bc.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw897bc980-de36-448a-ba10-6d86047629bc.tmp
                                                        • Size 9KB
                                                        • SHA256 690b095029321f57866ba6663a20e56a043aa188cd59874546fec44afc24ef0e
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw8e2cd2aa-fa27-4099-8f66-615d8c17f795.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw8e2cd2aa-fa27-4099-8f66-615d8c17f795.tmp
                                                        • Size 10KB
                                                        • SHA256 fdd00b2b4ff6f60653501836fdfa040c3838204feb34c6c4a8aa633704d8b221
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw901ce5de-98ca-4acc-973b-92c9aa5d4b44.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw901ce5de-98ca-4acc-973b-92c9aa5d4b44.tmp
                                                        • Size 9KB
                                                        • SHA256 6352f457b9d427ec1e3ee5167d93b52466f590445e2103c2a3d98da39dc0251e
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw918dc5af-5450-480b-baf0-8af939229489.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw918dc5af-5450-480b-baf0-8af939229489.tmp
                                                        • Size 7KB
                                                        • SHA256 f94193e4f0999ec0aa37fe4403360b20b828e734729cee3f3c182697109ea49f
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw98d8e99e-09b9-44be-b66b-47a851ef4ffe.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw98d8e99e-09b9-44be-b66b-47a851ef4ffe.tmp
                                                        • Size 973B
                                                        • SHA256 7bbc0c50b3c16c9e628fc3a525333eb1a2d178d1a83998f94f8086993d29a3c9
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw9e45683e-bb38-41a5-a3ea-079052cb6df7.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.raw9e45683e-bb38-41a5-a3ea-079052cb6df7.tmp
                                                        • Size 925B
                                                        • SHA256 e8bba953806d91967f4cdc8bce63743ce0844300c6292687b569be2d9aecc9d2
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawa4cd8855-3972-48b3-aa33-ebb85fd049cd.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawa4cd8855-3972-48b3-aa33-ebb85fd049cd.tmp
                                                        • Size 749B
                                                        • SHA256 4280a5beab8e17bef42fa706f80051bb653719e6486fbd93010c1f1ec1b324e0
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawa711928a-c38b-4fc3-a777-2ee0748dea4b.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawa711928a-c38b-4fc3-a777-2ee0748dea4b.tmp
                                                        • Size 1KB
                                                        • SHA256 d02c5d1443ae6f9c5c9e5f6345fa7be4f116e2d4a80b8bfec2b0dc798f647b42
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawb0576d4c-3054-4631-bbc4-287aa3d816b0.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawb0576d4c-3054-4631-bbc4-287aa3d816b0.tmp
                                                        • Size 493B
                                                        • SHA256 509d1744e295aaaabdb3645c7e4c798e287e20a8efcc9f5e74f0f8dbc11e2b4f
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawb0b89087-1a1b-422f-83d6-e0590c06df69.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawb0b89087-1a1b-422f-83d6-e0590c06df69.tmp
                                                        • Size 6KB
                                                        • SHA256 df92932b3db7cb30e27295a7f35c75b467fbd02f6052c172b293d3e8e77f774f
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawb618d548-333e-455a-a4f1-26c21da789c7.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawb618d548-333e-455a-a4f1-26c21da789c7.tmp
                                                        • Size 1KB
                                                        • SHA256 2a086f637d56bf7536afbbf63f7a3d66465c330d20d848f3766445483939a710
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawc3ab4b57-3190-46cc-b5d3-bcc6c03e1e3a.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawc3ab4b57-3190-46cc-b5d3-bcc6c03e1e3a.tmp
                                                        • Size 1KB
                                                        • SHA256 ebf95bc1f4610efb9baa6f1120c6a0e7dfd8cd8b69926f5f0cde3cd3bf3bf797
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawca91843f-a3e7-4ec2-bd34-8f480e337e19.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawca91843f-a3e7-4ec2-bd34-8f480e337e19.tmp
                                                        • Size 10KB
                                                        • SHA256 ac0ed9bd75e560f9916d0b8f94f7e6888942d2d670e9e65b2743b50acbb377d9
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawcb567693-f7d7-4a25-96eb-eba2ef2c6db3.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawcb567693-f7d7-4a25-96eb-eba2ef2c6db3.tmp
                                                        • Size 8KB
                                                        • SHA256 0ab5165099917a3c907fa441f2641de07738ef75e761662103174ed59c54b7d7
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawcc37c20e-6142-468e-b9cb-16624562d007.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawcc37c20e-6142-468e-b9cb-16624562d007.tmp
                                                        • Size 10KB
                                                        • SHA256 fe911b515ec098f81439289804670d525b277884c3a6cd4bc283407a5ec35a8c
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawd00d7b57-67f1-4d31-b59c-5f71c988aba4.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawd00d7b57-67f1-4d31-b59c-5f71c988aba4.tmp
                                                        • Size 621B
                                                        • SHA256 9147b1e996b18b821df358b90ec4d21ec6768b2632ea4422d3755bfd2b0f38a2
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawd053bba0-899f-44ba-a35d-4d30caf6bb71.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawd053bba0-899f-44ba-a35d-4d30caf6bb71.tmp
                                                        • Size 8KB
                                                        • SHA256 5ec7348c51436b58b761a108922b8f58e78bb3e9553e95b4b526fc2aad41af58
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawde3ddea9-742c-4709-9640-cbea9dcf301a.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawde3ddea9-742c-4709-9640-cbea9dcf301a.tmp
                                                        • Size 1KB
                                                        • SHA256 ea1430362f61afe571e52a762c89f9c9b577e90d282644785370a798511adb34
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawe40288f6-92e1-42f5-8a21-3c92fb2aaa1b.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawe40288f6-92e1-42f5-8a21-3c92fb2aaa1b.tmp
                                                        • Size 9KB
                                                        • SHA256 f82bf5f4b65f0cd5558066d2fb8b4a15cde088dd042744bf1224c9066c1d4364
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawe40da79e-e228-4732-ac60-d9aaf18596dc.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawe40da79e-e228-4732-ac60-d9aaf18596dc.tmp
                                                        • Size 8KB
                                                        • SHA256 3a8983606af3594af2931ab7e6b18e536fa481f190368c81520148ae814019e2
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawf1ecd317-a3c1-4de1-ba2a-4064720ab152.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawf1ecd317-a3c1-4de1-ba2a-4064720ab152.tmp
                                                        • Size 9KB
                                                        • SHA256 b2d190fe8e8918d5694aa31ee9210f5f1da17799579a0c81ea52b1f8ffcac25b
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawf72c1e3c-f54f-4fc1-8c60-9ca90dda581b.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawf72c1e3c-f54f-4fc1-8c60-9ca90dda581b.tmp
                                                        • Size 10KB
                                                        • SHA256 ec9d6eb4c27b58ed92a6ef26b6c868180a7c2099241134212a60ddcc97d2eead
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawfaeea325-c1a4-4674-a436-75a9fe2320ab.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b4ce22c7-e898-45bb-a918-6af066c4d88a.rawfaeea325-c1a4-4674-a436-75a9fe2320ab.tmp
                                                        • Size 10KB
                                                        • SHA256 87e8bd0892a88a3b2aeba1797a86562250696d01ade22a25128fa773c7aa4e4d
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        MANIFEST-000001
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\MANIFEST-000001
                                                        • Size 41B
                                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        rhs.dat
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\rhs.dat
                                                        • Size 113KB
                                                        • SHA256 ec48b44b406c128cefe7e1cd672b0290ee87d91e9ca01302b53f93d793e96b11
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        ssdfp3944.0.1346164307
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3944.0.1346164307
                                                        • Size 203B
                                                        • SHA256 7fd2b9e76581d21ea950b5fb671863e2181db45f49d24a7e435914ac58b7d1f1
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp3944.0.13461643074cc1a713-fe17-4860-a883-268d81b8fd9a.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3944.0.13461643074cc1a713-fe17-4860-a883-268d81b8fd9a.tmp
                                                        • Size 1KB
                                                        • SHA256 470f4faaef11909fcf29b6b167e689133063071a2598268c97dde3e3b7143118
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp3944.0.13461643076c808d2c-024b-4312-92f7-a2902daba7f6.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3944.0.13461643076c808d2c-024b-4312-92f7-a2902daba7f6.tmp
                                                        • Size 1014B
                                                        • SHA256 824670041a346dd48b6ad9d45b71e585b74edd4fd35d63f42fe26aa6622f82a7
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp3944.0.1346164307ff7df946-7040-4a07-9f3e-21693a25a8a0.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3944.0.1346164307ff7df946-7040-4a07-9f3e-21693a25a8a0.tmp
                                                        • Size 265B
                                                        • SHA256 7d1badc4f8731c18d38b724162e6217ad86d510c63b6d37eab7fe24107e5e8e7
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.0.1916525861
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.0.1916525861
                                                        • Size 457B
                                                        • SHA256 d4f3e47290e45514429a38ef9fcce43cebc39dc99c3894103d07327f74b96adb
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.0.191652586102dcd13d-3d1b-4d1c-9067-c7c5ad2aa086.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.0.191652586102dcd13d-3d1b-4d1c-9067-c7c5ad2aa086.tmp
                                                        • Size 555B
                                                        • SHA256 fe7e5c21ca5ff52c587b8b7bd3e2a0831fc97902170615d38791d5634c184e95
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.0.191652586126869a8d-54b4-4e86-8200-c6f4a1cc40f4.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.0.191652586126869a8d-54b4-4e86-8200-c6f4a1cc40f4.tmp
                                                        • Size 1KB
                                                        • SHA256 6365233b101c38963a604d2c4ff2e0f7ad47d2d776f15456cedaac5f2b002b5a
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.0.19165258612fb74501-d55c-4b29-8320-711e89a164b4.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.0.19165258612fb74501-d55c-4b29-8320-711e89a164b4.tmp
                                                        • Size 1KB
                                                        • SHA256 0f14f9d4818cff3f331471cbeffdb2e51dba74e35ecdab7562f39d971667f45d
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.0.1916525861389d31a3-25a5-420f-b1f1-a249b626c355.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.0.1916525861389d31a3-25a5-420f-b1f1-a249b626c355.tmp
                                                        • Size 1023B
                                                        • SHA256 0b850fd1527f4fe6c292fa7d401d6845e580d6820b5752d66db5c93a162bff20
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.0.1916525861439b471d-ae20-4bb2-9f1b-61e5bd882c28.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.0.1916525861439b471d-ae20-4bb2-9f1b-61e5bd882c28.tmp
                                                        • Size 1KB
                                                        • SHA256 d9c32a80efd96692b1fafc7c941b42e845ddffab293ffc8e7f88154ecaedbd1f
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.0.191652586146da4fe3-9122-4b7b-aba5-4ea5dcd69e61.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.0.191652586146da4fe3-9122-4b7b-aba5-4ea5dcd69e61.tmp
                                                        • Size 2KB
                                                        • SHA256 35372b5a01a623070e5f808a3842dd8a78b5d7904b19bf653a6e2b1000ce1e3f
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.0.19165258614c7183a4-aba6-4bb2-b2be-2ce637aad832.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.0.19165258614c7183a4-aba6-4bb2-b2be-2ce637aad832.tmp
                                                        • Size 645B
                                                        • SHA256 3ba7def91ccf5b9d5a285cc36be3b8e26a019278f69a294039fb8e861d69135e
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.0.19165258615ab303eb-efc7-417e-b31c-667babd13de9.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.0.19165258615ab303eb-efc7-417e-b31c-667babd13de9.tmp
                                                        • Size 3KB
                                                        • SHA256 8fe84e8cffbbc71269c3a49124973eca8f8210b236bbcd5919b9c333643c5075
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.0.19165258615ff4168b-9bf8-4958-8920-49854630a1b4.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.0.19165258615ff4168b-9bf8-4958-8920-49854630a1b4.tmp
                                                        • Size 924B
                                                        • SHA256 fba05476e45b0da24b7be105a457cd33980eb6a7cc0fb73af5b8da37ee5e6c85
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.0.191652586166ef2310-6ead-4499-91de-15df3d010352.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.0.191652586166ef2310-6ead-4499-91de-15df3d010352.tmp
                                                        • Size 1KB
                                                        • SHA256 18e1f9116da4c93694ab21266c4e3a8ea02c3b97079f231f89f2ca82cf14bb2d
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.0.191652586182274055-329c-4065-a81d-7122c2cb7957.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.0.191652586182274055-329c-4065-a81d-7122c2cb7957.tmp
                                                        • Size 1KB
                                                        • SHA256 29d9a06b2e1bb6158aa4868179feba3ae2a74d6cf4650c1724eb754e3418d893
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.0.19165258618cd2e4b3-32b3-427a-83c6-49ec7c426ea5.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.0.19165258618cd2e4b3-32b3-427a-83c6-49ec7c426ea5.tmp
                                                        • Size 3KB
                                                        • SHA256 c7413dc5a9fc857c212267c39d550b20f880a00d11265155347faed1b8444065
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.0.1916525861a063bf81-9d04-4db6-a69b-a3ee13740ab5.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.0.1916525861a063bf81-9d04-4db6-a69b-a3ee13740ab5.tmp
                                                        • Size 3KB
                                                        • SHA256 bdeed60e6ca3844c930a924cfe50557da091cd611641065deaf7a1cbf3e6c034
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.0.1916525861a4c18617-d0f1-49ba-89d6-b770263430fd.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.0.1916525861a4c18617-d0f1-49ba-89d6-b770263430fd.tmp
                                                        • Size 3KB
                                                        • SHA256 329f65badf5120cc56b0065ec01f21efa3667484d81407caeb7ca3c52594871e
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.0.1916525861b2a70fac-c5e5-4a7e-8a39-243fe476b4c2.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.0.1916525861b2a70fac-c5e5-4a7e-8a39-243fe476b4c2.tmp
                                                        • Size 3KB
                                                        • SHA256 ffe157f7dc1b42b101fa58a61f1b27d4fb422bf1f6007b470a2a4c1bad39fa5a
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.0.1916525861b3a2c4d0-9459-4d10-a0ed-49652b90cdf1.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.0.1916525861b3a2c4d0-9459-4d10-a0ed-49652b90cdf1.tmp
                                                        • Size 3KB
                                                        • SHA256 5efbecf53f0f2e19a2d4eb3f9bb2221f03e6cf8c9422e0ec7a7ec9b0c153771d
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.0.1916525861ba3664ab-02a5-42b1-81a4-e1138bd13b9e.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.0.1916525861ba3664ab-02a5-42b1-81a4-e1138bd13b9e.tmp
                                                        • Size 732B
                                                        • SHA256 a5f92777b33671f12b97efe13d88f237d9d0c652a7bc5fe8f5eea5e1aeb54028
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.0.1916525861bad24630-abe8-44c7-ac76-a27c9bccbcba.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.0.1916525861bad24630-abe8-44c7-ac76-a27c9bccbcba.tmp
                                                        • Size 3KB
                                                        • SHA256 8182c730f834e15e88c53f14d013827d05a4819f6e8be3f3d41965bd1ce81c07
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.0.1916525861d4a46840-bb1b-450f-9f52-9cad344b4651.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.0.1916525861d4a46840-bb1b-450f-9f52-9cad344b4651.tmp
                                                        • Size 1KB
                                                        • SHA256 d3ea00ae59c604961b476b2cfe5f6b19bfe84e7d94c76e22d9f49c7df4c1bb39
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.0.1916525861ee05c0d2-7182-4845-b47a-24a158c4a745.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.0.1916525861ee05c0d2-7182-4845-b47a-24a158c4a745.tmp
                                                        • Size 828B
                                                        • SHA256 f04a4e0190e8944aefc6b05193d302434ca5e87affa1a4bbffde6e9f51c86126
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.0.1916525861f6c324cf-c9e4-4a71-909d-37f123f3e8e7.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.0.1916525861f6c324cf-c9e4-4a71-909d-37f123f3e8e7.tmp
                                                        • Size 1KB
                                                        • SHA256 d35e5e030737b16d57484e8f1f356aa2a972bb0635bd5f1b412cd2d54ff9d023
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.0.1916525861fd4d3c11-b034-4b50-ba14-1bbf44012cb0.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.0.1916525861fd4d3c11-b034-4b50-ba14-1bbf44012cb0.tmp
                                                        • Size 3KB
                                                        • SHA256 6e9d7ae14f728b208f46d8a1fbd6a934a4367b2375179f505dfd288a36d849be
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.1.322867721
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.1.322867721
                                                        • Size 171B
                                                        • SHA256 e5adc752d5b11956c4ce7fe33d38d027bf6e4dfd09b6722f5dc444db50d513ba
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.1.322867721156982f7-890e-4928-a5a8-f0a71608122b.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.1.322867721156982f7-890e-4928-a5a8-f0a71608122b.tmp
                                                        • Size 224B
                                                        • SHA256 afebef8fcc82b66161f7b20bff0807b234ad7c6bd36ce30f6723dbc63df47a46
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        ssdfp992.1.32286772189eae7d5-d1bd-4b07-98e4-17c5abbdd7af.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp992.1.32286772189eae7d5-d1bd-4b07-98e4-17c5abbdd7af.tmp
                                                        • Size 200B
                                                        • SHA256 97b647b44b90c3138d65145c55fd563bda0a065214af1bc287093f922dbe6fa9
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        suggestions_cache.json2e2d32ad-fdef-4662-8b3f-afc871511596.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.json2e2d32ad-fdef-4662-8b3f-afc871511596.tmp
                                                        • Size 652KB
                                                        • SHA256 f8d1e592103e172d75dc78b61d68599239756842e5496708f452c6168c224a52
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        data_1
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
                                                        • Size 264KB
                                                        • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                        • MD5 SHA1 SHA512 SSDEEP
                                                        Submit Download

                                                        Local State2ad5f76b-3a91-4980-9592-85218b155800.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State2ad5f76b-3a91-4980-9592-85218b155800.tmp
                                                        • Size 4KB
                                                        • SHA256 edb8030429a80f33d73a9ed9bea071a76e686c437d84e3cfaeef78c7fea40792
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Local State33808469-38f3-451b-b7e0-cecb929d1e55.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State33808469-38f3-451b-b7e0-cecb929d1e55.tmp
                                                        • Size 3KB
                                                        • SHA256 e62b7b5016241680867717c594168c42e39962378b3ca49a63a753507a28b243
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Local Statee294945a-1c49-48ce-92bf-b46a1b978a36.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local Statee294945a-1c49-48ce-92bf-b46a1b978a36.tmp
                                                        • Size 4KB
                                                        • SHA256 11ddd8c220dc203cb87cd6bc5a590dfee6556dc3aa417b595eaaceea6120f6a6
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        VariationsSeedV2f38a45a7-45d0-4c1c-a040-6254d1b84ffe.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2f38a45a7-45d0-4c1c-a040-6254d1b84ffe.tmp
                                                        • Size 11B
                                                        • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        VariationsSeedV2fd01717e-70df-4357-928d-a8e2ee69bece.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2fd01717e-70df-4357-928d-a8e2ee69bece.tmp
                                                        • Size 19B
                                                        • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        clipboard_injection_guard_rules.json
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\clipboard_injection_guard_rules.json
                                                        • Size 7KB
                                                        • SHA256 cadfc443f92476613d67eaf9ed1b81dbb2919820e03e1c8be4e28722a24ec67a
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        metadata.json0ba7c596-b791-465d-b5ac-f20a368f8df0.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json0ba7c596-b791-465d-b5ac-f20a368f8df0.tmp
                                                        • Size 124B
                                                        • SHA256 fc3b8596fc2e4a6ba84521cd08acf8e69c5ad59f1facb20f7975cba56085f519
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        metadata.json933c7b90-9799-4f2f-9b8a-7006e5278533.tmp
                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\extensions_crx_cache\metadata.json933c7b90-9799-4f2f-9b8a-7006e5278533.tmp
                                                        • Size 13B
                                                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        manifest.json
                                                        • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping992_1868280512\manifest.json
                                                        • Size 94B
                                                        • SHA256 95a2b0748baee70740ff2d5da78f98b5a29950562f989591f0b0b5bf13354b85
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        opera-one.jpg
                                                        • Path C:\Windows\SystemTemp\scoped_dir992_233906260\opera-one.jpg
                                                        • Size 194KB
                                                        • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        persona.ini
                                                        • Path C:\Windows\SystemTemp\scoped_dir992_233906260\persona.ini
                                                        • Size 207B
                                                        • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        opera-one-dark.jpg
                                                        • Path C:\Windows\SystemTemp\scoped_dir992_90176265\opera-one-dark.jpg
                                                        • Size 349KB
                                                        • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        persona.ini
                                                        • Path C:\Windows\SystemTemp\scoped_dir992_90176265\persona.ini
                                                        • Size 217B
                                                        • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        memory/4676-603-0x00007FF896F90000-0x00007FF896F91000-memory.dmp
                                                        Download

                                                        memory/4676-599-0x00007FF897350000-0x00007FF897351000-memory.dmp
                                                        Download